Modern Cars and Mobile Apps Sharing Users’ Private Data with Third Parties, Study Finds

Modern vehicles and mobile applications are sharing users’ personal information and sensitive data with advertising and analytics companies without their knowledge. This startling finding has emerged from a recent study jointly conducted by Northeastern University and Consumer Reports.

The researchers examined 21 new car models and apps from 30 automakers. They found that most of the vehicles were transmitting sensitive information, including owners’ vehicle identification numbers (VINs), email addresses and precise location data, to commercial entities through Wi-Fi connections and mobile applications.

Which Companies’ Apps Are Sharing User Data?

According to the study, 19 of the 21 vehicles examined transmitted data to at least one third party through Wi-Fi connections. Among them, several popular General Motors (GM) apps—including MyCadillac, MyChevrolet, MyBuick and MyGMC—directly sent vehicle identification numbers to 10 different companies, including Microsoft and Adobe.

Similarly, the HondaLink app shared users’ location and vehicle information with Amplitude, an analytics firm.

Apps associated with Nissan and Lincoln have also faced similar allegations of privacy violations.

Researchers noted that while mobile advertising IDs can be changed relatively easily, a vehicle’s VIN cannot. This makes it easier for advertisers to link users’ online activities with their offline behaviour.

Automakers’ Arguments and the Privacy Crisis

In response to the allegations of data sharing, automakers have claimed that such exchanges are conducted in accordance with vendor agreements and their privacy policies.

Critics, however, argue that the privacy policies governing these apps are often too vague for ordinary consumers to understand. In many cases, drivers who attempt to opt out of data-sharing agreements risk losing access to essential features, such as vehicle navigation and automatic software updates.

According to the report, no company other than Honda had immediately taken steps to address the issue.

In light of the situation, technology experts have called on the relevant regulatory authorities to take swift and stringent action to ensure the highest possible level of protection for users’ personal information.

//DBTech/BMT/OR//