Modern vehicles, often lauded for their connectivity and advanced features, are increasingly functioning as sophisticated surveillance platforms. A recent collaborative study by **Northeastern University** researchers and **Consumer Reports** has shed light on the alarming extent to which our cars are collecting and sharing personal data. The study, the first of its kind, meticulously documented the flow of data from vehicles to their companion apps and, crucially, to a multitude of third-party companies. This network of data exchange reveals exactly what information is being extracted from our cars and who is receiving it. ### Constant Surveillance, Far-Reaching Implications At its core, the research indicates that car manufacturers are engaging in continuous surveillance of their drivers. This collected data is then utilized in various ways, often against the driver's interests. Recipients of this sensitive information include car insurers and lenders, who leverage "telematics data exchanges" to compile driving profiles on millions of individuals. Thousands of data brokers use this information to create personalized risk scores, which can influence everything from loan terms to insurance premiums. Beyond financial entities, companies selling infotainment and WiFi hotspot products, and even local and state government agencies involved in planning, traffic, and safety initiatives, are part of this data ecosystem. ### Personally Identifiable Information at Risk Nearly every automaker was found to be transmitting data to external companies. More concerning, almost a quarter of the vehicle-related apps analyzed were sending out personally identifiable information (PII). This PII includes vehicle owners' names, Vehicle Identification Numbers (**VINs**), and precise geographic locations. The implications of this are significant. Such information makes it remarkably easy for companies to link driving behaviors to existing personal data profiles maintained by data brokers and marketers. These comprehensive profiles are routinely sold to a wide array of entities, including banks, insurers, pharmaceutical companies, lenders, and retailers. The ultimate use cases range from personalized loan offers and filtered bank services to tailored insurance quotes, as previously uncovered by a **CR** and **CalMatters** investigation. ### The Consumer as the Product The long-standing adage, "If you're not the customer, then you're the product," takes on new meaning in the era of internet-connected everything. This study underscores that, even when you are the paying customer for a vehicle, your data has become a valuable commodity, effectively making you the product.