Your car’s app could be telling Big Tech who you are and where you go
Northeastern and Consumer Reports found 19 of 21 cars and 7 of 30 companion apps send data to advertising and tracking domains.
Northeastern University researchers working with Consumer Reports tested 21 cars from 19 brands (model years 2022-2025) and 30 companion apps, observing network traffic while stationary, driving, and during app use. They found 19 of 21 vehicles contacted at least one third party over Wi-Fi and 7 of 30 apps transmitted sensitive identifiers to advertising and tracking domains; Amazon, Google, Meta, and Microsoft were among leading recipients. VINs combined with precise location, names, and emails can link driving patterns to advertiser and data broker profiles. After findings were presented, Honda directed vendor Amplitude to delete location data, and the study follows Texas AG Ken Paxton's lawsuit against GM over selling driving data.