Your Car Is Spying On You What It’s Collecting and Who It’s Telling

I used to think of my car as just a tool to get from point A to point B. But after this conversation, I can’t help but see it as something else entirely, a powerful data collection device that knows far more about me than I realized. From where I go and who I text to how I drive and even what’s on my phone, today’s vehicles are gathering a staggering amount of personal information.

In this episode, I talk with Andrea Amico, the founder of Privacy4Cars. Andrea is one of the leading voices in automotive data privacy and someone who’s spent years uncovering the hidden ways cars collect, store, and share our information. He breaks down how connected cars work, what’s actually being tracked, and why it matters not just for your privacy, but for your safety and finances too.

We get into everything from rental car risks and data left behind when you sell a car, to how automakers and third parties might be profiting off your data without your knowledge. If you’ve ever paired your phone with a vehicle or assumed your texts disappear when you disconnect, this episode is going to change the way you think about driving and how to take back control.

Show Notes:

• [01:28] Andrea started Privacy4Cars because cars collect a lot of data. There were zero protections for privacy and security. He's dedicated to turning your car into a more private space and giving you more choice, understanding, and control.
• [02:25] We talk about when cars started collecting data. OnStar started about 25 years ago. Things really began to evolve when Bluetooth and navigation became common.
• [03:12] Things really exploded with modern telematics which is like putting a cell phone inside your car that calls home all the time. The average car collects around 25 GB of data per day.
• [04:08] We talk about the type of data that is collected by cars from GPS to having your phone collected and the car even knowing your weight.
• [05:26] The sensors in your car know exactly how you drive.
• [06:46] Informed consumers are better off. These data collecting policies are usually hidden in the car manufacturers privacy policies.
• [08:46] You can find your car's privacy policy at Vehicle Privacy Report.
• [10:21] The goal is to make the car manufacturer's behavior visible to consumers, because that's the way to drive better company behavior.
• [11:26] When you rent a car and when you sell a car, your car is like a giant unencrypted hard drive that contains your data.
• [12:06] We should wipe the data in our cars the same way we wipe the data in our phones when we replace them.
• [13:05] You can find a tool to help remove data from your car at Privacy4Cars.
• [14:21] We talk about what rental cars get from your connected phone. 
• [17:24] Found data can be used in targeted spear phishing attacks.
• [19:18] Most cars since 2017 have a SIM card. If a prior owner consented to data collection, that data is still being collected when you take over the car.
• [22:15] Ford estimated that they would make $2,000 per car per year from data services.
• [24:17] It's common for cars to even have a camera that looks at you. In a few years it might be common for vehicles to monitor for things like intoxication.
• [26:56] Organizations creating standards like the Future of Privacy Forum.
• [29:09] Cars have an EDR electronic data recorder. It's like a black box for when an accident happens.
• [34:05] Delete data when you buy, rent, or sell a car. Opt out if you can.
• [36:33] Think about your car just like your computers and your phone.
• [37:15] Andrea shares a story about how an ex-spouse was able to duplicate her key. The dealer wanted $1,000 to reset her car.
• [40:23] Parting advice includes looking up your car's VIN at Vehicle Privacy Report.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave