⚙️ Article Summary
A recent study conducted on 21 types of modern cars shows that driving and location data are being collected and transmitted to third-party companies intensively, often without sufficient knowledge or consent from users. These findings reveal major challenges in the field of data privacy in connected cars, especially with the emergence of systems such as Google’s Android Automotive OS, and the overlap between car data and personal information through companion mobile apps. The research highlights the need to strengthen transparency and improve users’ control over their data.
🏗️ How Do Modern Cars Collect Your Data?
Modern cars, especially internet-connected ones, are like smartphones on wheels, as they collect a variety of data including:
- Precise driving locations.
- Acceleration and braking patterns.
- Steering and vehicle movements.
This data is sent to different companies via Wi-Fi or cellular networks.
A research team from Northeastern University, in cooperation with Consumer Reports, conducted a comprehensive analysis of outbound data traffic from 21 cars from 19 brands in the United States.
To track data movement over Wi-Fi, the researchers used a Raspberry Pi device inside each vehicle, connected to the car network, and through a mobile hotspot they were able to monitor outbound data while the car was moving.
🔌 Data Destinations and Receiving Parties
The results showed that all tested cars send their data to external sites via Wi-Fi. What is more concerning is that more than half of these connections go to companies specialized in advertising, analytics, and tracking, such as companies:
- Adobe
- LexisNexis
- Amplitude
These companies collect information about driving behavior and data to enhance advertising or improve insurance services.
Using advanced operating systems such as Google’s Android Automotive OS and the increased reliance on Google services increase the amount of data sent to third-party companies, because those systems integrate preprogrammed communication protocols with multiple services.
🔧 The Role of Companion Apps
The research showed that phone apps linked to cars are an additional gateway for leaking personal data, as the team observed weak security in 7 popular apps for cars from brands such as Honda, General Motors, and Nissan.
- Vehicle Identification Numbers (VIN), phone numbers, and precise locations were sent directly to advertising networks.
- More than 70% of these apps connected to more than five different tracking companies.
Sharing the VIN with personal identification data enables data brokers to build detailed profiles of drivers, which represents a serious threat to privacy.
🌐 Research Techniques and Monitoring Methods
To monitor data traffic using cellular networks, the researchers followed an innovative method by building a Faraday tent that blocks external network signals, forcing the cars to rely on controlled Wi-Fi to send data.
This method gives researchers a safe monitoring environment without interfering with public networks or causing legal problems.
⚠️ Legal and Regulatory Issues
Legal bodies demand the rights of car users to control their information. For example, the Federal Trade Commission criticized General Motors for collecting and selling location and driving-behavior data without clear consent.
Also, companies such as Ford and Honda faced fines because of the complexity of opt-out options for data collection, making it difficult for users to control their data.
Some car companies called for software updates to stop some data-collection practices based on the research findings, such as the HondaLink update.
🛠️ Technical Challenges and Future Suggestions
Car engineers face several difficulties in developing systems that balance data collection for analytical and service purposes with preserving user privacy:
- The difficulty for users in understanding privacy policy terms that they often fail to read.
- The lack of explicit opt-in mechanisms compared with the opt-out system that many companies rely on.
- The complex design of the app and software system inside cars has made the process of monitoring communication data traffic complicated.
Experts stress that the next steps should include:
- Designing user interfaces that make data control easier.
- Transparent mechanisms for collecting consent.
- Including smart protection systems that restrict the sending of sensitive information to untrusted parties.
🌟 Technical Conclusion
As cars evolve into connected digital platforms that integrate electronics engineering, software, and the internet, there is an urgent need to update general engineering skills and practices to ensure the safety of users’ privacy, through a deeper understanding of tools such as Wi-Fi tracking and data analytics and securing vehicle data without affecting their smart functions.
🚘 The Future of Data Privacy in Cars
The automotive industry needs to adopt stricter and more transparent standards in managing driver and vehicle data so that the collected data is clear, users have better control, and the parties that access the information are clearly identified.
This shift requires integrated engineering cooperation between:
- Vehicle systems design engineers
- Cybersecurity experts
- Software and application developers
- Regulatory policy makers
Overcoming these challenges will have a positive impact on the field of general engineering and enhance the role of smart cars in our lives in a safe and reliable way.
📚 Related articles
Discover more from Mohdbali
Subscribe to get the latest posts sent to your email.
