Northeastern Study Found Cars Shared User Data

Researchers discovered that most modern vehicles and connected apps transmit personal data to third-party firms.

Updated on Oct. 11, 2026 in Automotive — General

Northeastern Study Found Cars Shared User Data

Live Poll

Do you trust that your car manufacturer keeps your personal driving data private from advertisers?

A study conducted by Northeastern University between October 2024 and August 2025 found that most new cars and automaker apps share user information with third-party companies. Data transferred includes VINs, email addresses, and precise location details.

Why it matters

The findings highlight significant privacy concerns as vehicles increasingly function as connected devices that transmit personal telemetry to advertising and analytics firms. This data collection often occurs without explicit owner awareness during standard operations.

Researchers tested 21 late-model cars and 30 automaker apps, finding 28 of the apps contacted at least one advertising or analytics company. Notably, the Nissan Ariya app connected with 25 ad companies, while the Tesla Model 3 reached 22.

The players

Northeastern University

This private research university in Boston conducted the study regarding data privacy in connected vehicles.

General Motors

This major automotive manufacturer produces the apps myCadillac, myChevrolet, myBuick, and myGMC identified in the study.

Tesla

This electric vehicle manufacturer was included in the study, which found the Model 3 reached 22 advertising companies.

Honda

This automotive corporation produces the HondaLink app, which was found to send VINs and location data to third parties.

Nissan

This automaker was identified in the study, with its Ariya app found to be contacting 25 separate advertising or tracking companies.

The details

The study revealed that GM apps, including myCadillac and myChevrolet, transmitted VINs to 10 separate companies such as Adobe and Microsoft. Additionally, the HondaLink app shared VINs and vehicle location data with Amplitude, while Buick Envista users were exposed to 23 advertising entities.

Between October 2024 and August 2025, researchers tested 21 vehicles and 30 associated mobile applications.
GM began a 20-year FTC privacy order in January 2024.

Roadmap

This research reflects a broader industry shift toward turning vehicles into mobile data platforms to generate recurring revenue through analytics. It places manufacturers in direct conflict with increasing consumer demand for digital privacy and regulatory oversight like the 20-year FTC privacy order.

Drivers using manufacturer apps may have their location, VIN, and contact information shared with dozens of third-party advertisers without clear consent. Owners should review their app privacy settings and permission access to limit the data transmitted to these analytics platforms.

The takeaway

Vehicle owners can reduce their digital footprint by auditing app permissions and disabling unnecessary location sharing within their car's interface. Understanding that modern cars act as data collectors helps drivers make informed choices about which connected features to activate.