Modern cars have quietly become some of the most data-hungry devices a person owns, gathering detailed information about where a driver goes, how they drive, and in some cases what happens inside the cabin. A widely cited privacy review of the automotive industry concluded that new vehicles collect far more personal data than buyers realize and that manufacturers frequently reserve the right to share or sell it. The findings reframed the connected car not as a convenience but as a rolling data-collection platform.
The concern is not a single defective model but an industry-wide default. As automakers have added internet connectivity, smartphone integration, and sensor-laden driver-assistance systems, they have also built the infrastructure to record and transmit what those systems observe. The result is a category of product that gathers intimate information while offering owners little visibility into what is collected or where it goes.
The scope of what a connected car records
A contemporary vehicle can log precise location and travel history through its navigation and telematics systems, along with data on speed, braking, acceleration, and seatbelt use drawn from the same sensors that power safety features. Cars paired with a phone can absorb contacts, call logs, and text histories through the infotainment system. Cabin microphones and cameras built for voice commands and driver-attention monitoring add another layer of potential collection.
The privacy assessment published by the Mozilla Foundation’s research team examined the practices of major automakers and found that every brand it reviewed collected more data than necessary and did so in ways that were difficult for owners to understand or limit. The review flagged vague privacy policies that granted manufacturers broad latitude, including language permitting the sharing of data with service providers, business partners, and data brokers.
How the data leaves the vehicle
The pathway out of the car is the built-in cellular connection that also enables features such as remote start, crash notification, and over-the-air software updates. That same link can transmit collected data back to the manufacturer’s servers, where it is aggregated and, under many of the policies reviewed, made available to third parties. Some automakers operate connected-services programs that share driving behavior with outside firms, and reporting has documented cases in which such data reached insurance analytics companies that used it to influence rates.
Because the collection happens through systems that owners generally cannot switch off without disabling features they paid for, opting out is often impractical. A driver who wants navigation, emergency assistance, or smartphone integration frequently has to accept the data terms bundled with them. The consent that underpins the arrangement is typically buried in a lengthy agreement signed at purchase, which few buyers read in full and fewer still can meaningfully negotiate.
Why driving data is unusually revealing
Location and behavioral data from a car are especially sensitive because they map a person’s life with precision. A vehicle’s movement history reveals a home address, a workplace, a place of worship, a medical clinic, and the pattern of daily routines. Layered with timing, that record can expose relationships, habits, and vulnerabilities that a person never intended to disclose. Unlike a phone, which can be left at home, a car is present for nearly every trip a driver takes.
Behavioral data such as hard braking and rapid acceleration carries financial consequences when it reaches insurers. Programs that reward safe driving with lower premiums also, by the same logic, can penalize drivers whose data suggests risk, sometimes without the driver realizing the information was being shared. The line between a voluntary safe-driving discount and an involuntary surveillance-based rate can blur when the data flows through pathways the owner never explicitly approved.
The limited controls available to owners
Owners are not entirely without options, though the available controls are uneven. Some manufacturers provide account settings or apps that let drivers see and delete certain collected data or opt out of specific sharing programs, and residents of states with comprehensive privacy laws may have legal rights to request access to or deletion of their information. Declining to connect a phone, skipping enrollment in connected-services and driver-score programs, and using a standalone navigation device rather than the built-in system all reduce collection.
Those measures come with tradeoffs, because the same connectivity that gathers data also powers safety and convenience features many drivers value. Turning everything off can mean giving up automatic crash response or remote diagnostics. The practical reality highlighted by the research is that the burden falls on the owner to hunt down settings that are often hard to find, rather than on the manufacturer to collect less by default.
A regulatory gap the report exposes
The findings landed in a policy environment where oversight of automotive data has lagged the technology. Cars sit outside the sector-specific privacy rules that govern areas like health and finance, and in the absence of a comprehensive federal privacy law, practices vary widely and disclosure often satisfies the letter of the rules without giving owners real control. That gap is much of what makes the industry-wide pattern possible.
Consumer advocates and some lawmakers have pressed for clearer limits on what vehicles can collect and share, and for defaults that favor privacy rather than requiring owners to opt out of collection they may not know is happening. Whether stronger rules follow will depend on regulatory and legislative choices still unresolved. In the meantime, the report’s central message stands: a new car is, among other things, a sensor platform that records its owner’s movements and habits, and buyers who assume otherwise are working from an outdated picture of what a car is.
This article was produced with the assistance of AI and reviewed by Morning Overview editors prior to publication.
More from Morning Overview
