Northeastern University academics and Consumer Reports unveiled findings on Tuesday (29 September) that 19 of 21 major auto manufacturers collect customers' private data and disseminate it to advertisers, big tech companies and data brokers. Of 30 connected-car companion apps studied, 28 shared data with at least one third-party advertising or analytics firm and 7 sent at least one piece of personally identifiable data — owners' names, email addresses or precise geolocations — to an outside company. Researchers found four General Motors apps (myCadillac, myChevrolet, myBuick, myGMC) plus Honda, Nissan and Lincoln apps sharing VINs packaged with location data or email addresses, letting data brokers identify individual driving patterns and sell it. Recipients included Alphabet, Amazon, Microsoft, Meta, Reddit and Pinterest, with many playing dual roles as software providers and advertising-auction operators. The report follows California's May action fining GM more than US$12 million and barring driver-data sharing with credit bureaus and brokers for five years. After being notified, Honda directed an analytics vendor to wipe ingested location data and stop sharing it. Automakers said sharing is opt-in, but Consumer Reports argues drivers often don't know what they're agreeing to and some warn vehicles may become inoperable on opt-out.

• Source article