Northeastern University Study Finds Most New Cars Track Drivers
Northeastern University researchers found nearly every late-model vehicle and companion app tested transmits personal driver data to third-party advertising and technology firms.
Researchers at Northeastern University and Consumer Reports found that nearly every late-model vehicle operating in the United States transmits personal data to third-party companies. Testing 21 vehicles from model years 2022–2025 and 30 companion apps using a Faraday tent, the study revealed that 19 vehicles and 28 of the 30 apps sent data to outside parties. Seven apps transmitted sensitive identifiers, including vehicle identification numbers (VINs), email addresses, and precise geographic locations.
Major technology firms, including Alphabet, Amazon, Meta, Microsoft, Pinterest, and Reddit, were primary recipients of this data. The study identified the Tesla Cybertruck, Tesla Model 3, and Cadillac Lyriq as sending data to the highest number of outside firms. Apps from General Motors, BMW, and Toyota brands also contacted the most outside companies. While 14 of 17 manufacturers claimed these data flows aligned with service contracts or opt-in terms, researchers noted that some connected services are non-functional unless drivers agree to the sharing.
Honda responded to the findings by updating its HondaLink app and instructing its vendor, Amplitude, to delete received location data. The study follows recent regulatory pressure on the industry, including a Federal Trade Commission order against General Motors and a $12.75 million penalty imposed by California for unauthorized data sales.
