Back in 2023, the Mozilla Foundation released a research called: ‘Privacy Nightmare on Wheels’: Every Car Brand Reviewed By Mozilla — Including Ford, Volkswagen and Toyota — Flunks Privacy Test, detailing how automakers are collecting tons of data on its users (drivers AND passengers) and profiting out of it, as we explained in our article about it.
In this article, we break down how ten of the world’s largest and most prominent automakers are spying on drivers through their connected car programs. For each, we’ll see what kinds of data they collect and what they do with it (as reported by researchers, journalists, and sometimes the companies themselves). The list is in no particular order, but each one has been spotlighted by researchers or regulators for privacy issues.
The world’s biggest automaker is also one of the most aggressive data collectors. Toyota vehicles log location, driving habits, voice commands, and even biometric data like facial recognition. Toyota’s tangled web of 12 privacy policies makes it nearly impossible to know what you're agreeing to. Mozilla found that Toyota collects “way more data than necessary” and shares it with marketers. In 2023, the company admitted a decade-long security lapse that exposed the location data of 2.15 million users. Toyota says you can opt out after the damage is done.
VW doesn’t just track your driving — it tracks you. Age, gender, driving behavior, GPS data, voice interactions — everything’s fair game. The company explicitly uses this data for targeted ads. One VW subsidiary was caught quietly feeding location data to law enforcement. And in 2021, 3.3 million customer records were exposed in a breach. VW collects heavily and sells smart, turning every trip into marketing gold.
GM secretly handed over driver behavior to data brokers like LexisNexis, triggering automatic insurance hikes — without telling customers. Its OnStar system logged hard braking, speeding, and even the time of day you drive. After public backlash, GM ended the program, but still collects location and performance data for upsells, service nudges, and who knows what else. They say it's about safety. It’s also about money.
Ford is playing the same game. It quietly shares your driving patterns with insurance companies. Even if you opt out, you may have already been opted in by default. The FordPass app tracks your location constantly, and the company links the car data with dealership visits and web activity. Translation: Ford knows where you are, how you drive, and when you're due for an oil change—and they’re not keeping it to themselves.
Nissan is the creepiest player in the game. Their privacy policy admits to collecting sexual activity, health info, genetic data, and even psychological traits. They’re not shy about selling that data to brokers, marketers, or law enforcement. Through its apps and telematics, Nissan can build a disturbingly intimate profile of your life. Mozilla called them the worst offender, and for good reason.
These sister brands go far beyond location and driving data. Kia claims the right to collect info on your sex life, religion, and political beliefs. Hyundai admits to handing over data to law enforcement, even without a warrant. Both brands have shared driver behavior with insurance brokers. Their apps and voice assistants are portals for sensitive data collection, and their policies barely try to hide it.
Mercedes packs its luxury cars with sensors that monitor your every move—facial expressions, voice commands, even your mood. Some models come with TikTok installed, potentially streaming your data straight to third parties. Despite some lip service, the brand still failed Mozilla’s privacy test. Their vehicles may be elegant — but behind the dash, they’re spying machines.
Tesla doesn’t just track your driving — it records it. Internal and external cameras feed images back to Tesla for analysis, training, and storage. In 2023, employees were caught sharing private footage of customers for laughs. Tesla’s privacy policy is vague, opt-outs are nearly impossible, and your data is used to train the company’s AI. You pay Tesla to watch you — and you can’t turn it off.
Stellantis brands collect fingerprints, location, CarPlay usage, and even driver’s license numbers. Their vehicles store this info — and may sell it. The company claims it only collects what's authorized, but its policies are vague and full of legal loopholes. Your Jeep isn't just off-roading — it's uploading.
Honda captures voice commands, call logs, navigation history, and more through its HondaLink system. Once it shared driver data with insurance brokers, but backed off after public pressure. Still, opt-out options are limited, and core features break if you disconnect. Honda may seem tame, but it’s deeply wired into the data economy — quietly profiling you to refine products and push offers.
If you want to know how to protect your data from these creepy companies, check this article.
Aware Force is helping companies and consumers navigate this growing privacy minefield. We develop educational material and cybersecurity content that shines a spotlight on threats like these — and gives people the tools to fight back.
📩 Message us directly. Subscribe to the blog. Or simply reach out for a call.
Sources: Mozilla Foundation, Repairer Driven News,Insurance Business Mag
