Study Finds Car Apps Shared Sensitive Data With Ad and Tracking Firms
Summary
Researchers tested 21 cars and 30 companion apps, finding third-party connections and sensitive identifiers sent by some apps to advertising and tracking firms. Honda said it stopped sharing location data with a vendor after the findings were presented.
Key points
- Researchers from Northeastern University and Consumer Reports tested 21 cars from 19 brands and 30 companion apps from model years 2022–2025.
- 19 of 21 vehicles contacted at least one third party over Wi-Fi.
- Seven of 30 apps transmitted sensitive identifiers to third parties associated with advertising and tracking.
- VINs, precise location, names, and email addresses can potentially be combined to link vehicle activity to an individual and reveal sensitive patterns.
- Honda said it directed vendor Amplitude to delete location data it had received and stopped sending it.
- The article recommends reviewing app permissions and optional sharing settings, avoiding unnecessary account links, and asking manufacturers about data retention, sharing, and deletion.
Article Details
- Publisher
- Malwarebytes
- Scope
- Researchers from Northeastern University, working with Consumer Reports, observed network traffic from vehicles and companion apps for cars from model years 2022–2025.
- Sample Size
- 21 cars from 19 brands and 30 companion apps
- Key Statistics
- 19 of 21 vehicles contacted at least one third party over Wi-Fi.
- 7 of 30 apps transmitted sensitive identifiers to third parties associated with advertising and tracking.
- Recommendations
- Review companion-app permissions and turn off optional data-sharing settings.
- Avoid linking unnecessary accounts.
- Ask manufacturers what data they retain, share, and delete.