Study Found Vehicles Shared Driver Data With Third Parties

Researchers discovered that most modern cars and their companion apps transmit sensitive user data to advertising firms.

Updated on Sept. 29, 2026 in Car Types

Isometric editorial illustration showing a geometric steering wheel connected to a network of digital data filaments, representing vehicle privacy tracking. — A recent study found that 19 of 21 tested vehicles transmit sensitive user data to third-party advertising firms, often through companion applications. AI Illustration. Upload story photo >

Live Poll

Do you trust that your vehicle manufacturer keeps your driving and location data private?

A study conducted by Northeastern University and Consumer Reports revealed that 19 of 21 tested vehicles sent traffic to at least one third party. Additionally, seven of 30 companion mobile apps were found to share sensitive identifiers like location data and phone numbers with external advertisers.

Why it matters

Third parties use this collected information to build in-depth profiles of consumers for the purposes of advertising and tracking. Pairing a companion app to a vehicle has been shown to double the user's exposure to these external tracking entities.

Researchers tested 21 late-model vehicles from 17 different automakers and analyzed 30 companion mobile apps. The vehicles utilized WiFi and GPS connectivity to facilitate the transmission of data to companies including Google, Meta, and Microsoft.

The players

Northeastern University

This private research university based in Boston conducted the study on vehicle data privacy practices.

Consumer Reports

This nonprofit organization performs independent product testing and advocates for consumer safety and privacy rights.

Honda

This multinational automaker produces a wide range of vehicles and recently adjusted its data practices following study results.

The details

The data collection process often occurs when companion apps open external webpages that contain cookies, which then harvest user information. Following the study findings, Honda took steps to improve its own practices by ordering the vendor Amplitude to delete received geolocation data.

The study findings were published in September 2026.

Roadmap

This research identifies specific privacy risks that have emerged as a direct consequence of the industry's widespread adoption of connected vehicle telemetry. These findings underscore the tension between the push for advanced software integration and the increasing demand for data privacy protection.

Drivers using vehicle companion apps face increased exposure to tracking and advertising profiles through their integrated mobile devices. Owners may consider reviewing their app permissions or disconnecting apps from their vehicles to limit third-party data access.

The takeaway

Vehicle owners should be aware that syncing a mobile app to their car creates a broader digital footprint than the vehicle alone. Reviewing privacy settings within these apps is an essential step for individuals looking to minimize the amount of location and personal data shared with advertisers.