Connected Cars Share Extensive Data with Advertisers and Tech Firms
Study reveals alarming privacy practices in modern vehicles.
1Privacy nightmare in connected cars
A study by Northeastern University and Consumer Reports tested 21 cars from 19 brands, revealing extensive data sharing with advertisers and tech firms like Microsoft and Adobe. Companion apps exacerbate the issue, multiplying data leaks. The findings confirm Mozilla Foundation's 2023 report that labeled cars as the worst product category for privacy. Unlike Mozilla's policy review, this study measured actual network traffic under various scenarios including idling and driving.
2Testing methodology reveals patterns
Researchers parked 11 electric cars in a Faraday tent to test cellular signal loss effects, observing if traffic shifted to Wi-Fi. They attempted to analyze data packets using modified certificates but failed. However, network traces provided valuable insights including contacted domains, transmission volumes, timing, and behavioral differences across scenarios. This hands-on approach contrasts with previous policy-based assessments, offering concrete evidence of data practices.
3Data flows to unexpected recipients
The study uncovered traffic patterns showing data shared not just with vehicle manufacturers but also with third-party advertisers and tracking services. This occurs even during idle periods, suggesting constant background data collection. The companion apps were found to significantly increase data transmission, creating additional privacy vulnerabilities beyond the car's built-in systems.
4Technical limitations in analysis
While researchers couldn't decrypt the actual content of data packets due to encryption, they extracted metadata revealing communication patterns. This included DNS queries, TLS handshake details, and transmission frequency. Such metadata alone can reveal sensitive information about user behavior and vehicle usage patterns without accessing the payload content.
5Comparison with Mozilla's findings
Mozilla's 2023 report analyzed privacy policies of over two dozen automakers, concluding they were exceptionally poor. The current study validates these concerns through empirical evidence, showing policy violations in practice. Both studies highlight an industry-wide disregard for consumer privacy, with actual data practices potentially worse than stated policies.
6Electric vehicles show unique behaviors
The Faraday tent experiment with 11 EVs revealed how connectivity systems adapt to signal loss. This specialized testing demonstrates how manufacturers prioritize maintaining data flows, even creating alternative transmission paths when primary channels fail. Such behavior indicates the depth of manufacturers' commitment to data collection.
7Industry implications
The findings suggest automakers treat driver data as a revenue stream through partnerships with advertisers and tech firms. With increasing vehicle connectivity, these practices may expand unless regulated. The study provides concrete evidence for policymakers considering data privacy laws specific to the automotive sector.
8Consumer protection urgency
As cars become more connected, the scale of privacy violations could surpass other devices. Unlike smartphones where users can limit app permissions, vehicle data collection often occurs without meaningful consent options. This study underscores the need for transparency requirements and user controls in automotive data systems.