Some car apps are slipping owners’ data to big tech companies
Researchers found car apps sending VINs, emails, and location to advertising and analytics firms.
Northeastern University researchers, working with Consumer Reports, tested 21 vehicles from 19 brands and 30 companion apps and found some sending VINs, email addresses, phone numbers, or location to advertising, tracking, and analytics companies. Nineteen of 21 vehicles contacted at least one third party over Wi-Fi, 11 reached advertising or analytics domains, and 13 contacted Google-owned domains. Seven of 30 apps sent personal data onward; GM's myCadillac, myChevrolet, myBuick, and myGMC apps sent VINs to companies including Adobe, Acxiom, Google, Meta, and Microsoft. Manufacturers said the flows matched vendor contracts, while privacy policies disclosed third-party sharing without naming recipients or purposes.