GoKawiilNortheastern study finds GM, Honda, Nissan apps sharing VINs with ad companies
A Northeastern University study tested 21 recent cars and 30 automaker apps between October 2024 and August 2025, finding that seven apps sent identifiers like VINs, email addresses and precise locations to advertising and analytics firms. Four of those apps—myCadillac, myChevrolet, myBuick and myGMC—each sent VINs to 10 companies including Microsoft and Adobe, while HondaLink sent VINs and location to Amplitude, and Lincoln and MyNISSAN apps were also flagged. Consumer Reports found 28 of 30 apps contacted at least one ad or analytics company, with some cars that contacted none directly still exposing owners to over 20 tracking firms once their apps were included.
GoKawiil's interpretation of the reporting above, not reported fact.
Because a VIN cannot be reset like a phone's advertising ID, pairing it with an email address could let advertisers persistently link a car owner's identity across apps and websites, researchers suggest. The findings are notable given GM is already operating under a 20-year FTC privacy order issued in January, which may invite scrutiny over whether this data sharing complies with that agreement. The researchers also note their totals likely understate real exposure since they couldn't decrypt vehicle traffic for most cars.
- Seven of 30 tested automaker apps sent VINs, emails or locations to ad and analytics firms, including Meta, Google and Acxiom.
- Four GM apps each sent VINs to 10 companies, raising questions given GM's existing 20-year FTC privacy order.
- Cars that showed no direct tracking still exposed owners to dozens of ad companies once paired with their companion apps.
OBD-II GPS Blocker / Privacy Dongle — If you're worried about your car quietly beaming your VIN and location to advertisers, a simple OBD-II port lock can prevent unauthorized devices from tapping into your vehicle's data port. It's a cheap, practical way to add a physical layer of privacy control while automakers sort out their data-sharing practices.
See OBD-II GPS Blocker / Privacy Dongle on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: engadget.com — Luke James, 2026-10-11
Published there as: “Study finds many new cars share your data with third-party companies”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.