What Happens In Vegas - Stays in a Thousand Databases

You take a spontaneous detour on a road trip—perhaps a late-night snack run, a quick errand at a discreet medical clinic, or a stop at a political rally or place of worship. In the old days, that little side trip stayed between you and the open road. Today, your connected car quietly logs the precise GPS coordinates, arrival time, and how long you lingered—then beams it straight to the automaker’s servers. What happens on the road no longer stays private. It ends up in databases sold to insurers, lenders, data brokers, and more.

Modern vehicles function as sophisticated tracking devices. Since the early 2020s, nearly all new cars sold in the U.S. include telematics systems with GPS, accelerometers, and constant connectivity. These systems record not only speed, braking, and acceleration but also exact locations and timestamps. The data reveals deeply personal patterns: where you go, when, and for how long.

The Scope of Collection and Sale

A 2023 Mozilla Foundation investigation examined privacy policies from 25 major automakers, including BMW, Ford, Toyota, Tesla, Kia, Nissan, and Subaru. Every brand failed, earning the “Privacy Not Included” label—the worst category Mozilla had ever reviewed. Researchers found that 84% of brands share personal data with third parties, and 76% sell it. Some policies even referenced collecting inferences potentially linked to sensitive personal matters.

The New York Times exposed the practice in 2024 when it revealed General Motors fed detailed driving and location data from millions of vehicles to LexisNexis Risk Solutions. One driver learned his every trip—including hard brakes and accelerations—was compiled into a 258-page report requested by insurers. His premium rose despite a clean record. GM collected the data via OnStar and its Smart Driver program, often under the guise of safety or convenience features.

Consumer Reports’ 2025 investigation confirmed the issue spans the industry. Brands like Honda, Hyundai, Kia, Nissan, Toyota, and others share driver behavior and location data with data brokers and insurers. Location tracking can expose visits to sensitive spots—medical clinics, adult entertainment venues, domestic shelters, political events, or houses of worship. Aggregated profiles influence insurance rates, loan approvals, marketing, and even background checks. Law enforcement can access much of it through requests to automakers.

Financial Incentives and Regulatory Pushback

Automakers profit from these sales, even if the per-vehicle amounts seem small. U.S. senators highlighted in 2024 that Honda received about $26,000 for data from nearly 100,000 vehicles (roughly 26 cents each), while Hyundai earned over $1 million from 1.7 million vehicles. The real value multiplies as brokers repackage and resell the information repeatedly.

Regulators responded. In early 2025, the Federal Trade Commission accused GM and OnStar of collecting precise geolocation (updated every few seconds) and driving data without clear consent. The finalized January 2026 settlement bans GM from selling such data to consumer reporting agencies for five years and requires better transparency and opt-out options. GM ended the Smart Driver program but other sharing continues. The FTC has signaled broader scrutiny of sensitive location data across industries.

What Drivers Can Do

Options exist, though they remain limited. Check your vehicle’s settings menu or connected app immediately after purchase. Look for toggles to disable data sharing, location services, or connected features (note: this may disable crash notification or remote services). Review the manufacturer’s privacy policy carefully.

Under California and roughly 15 other state privacy laws, you can submit “right to know,” “right to delete,” and “right to limit sales” requests. Many automakers offer online portals for data access or deletion. Contact the company directly and ask for a full list of third parties receiving your data.

For stronger protection, consider driving older, non-connected vehicles when privacy matters most, or use a secondary phone without linking it to the car. Data minimization—collecting only what’s necessary—remains rare without federal rules requiring explicit opt-in consent.

Your car knows more about your private life than you might realize. Every trip to an embarrassing or sensitive destination can become permanent record in distant databases. Awareness and proactive steps are essential until stronger protections arrive. In the meantime, assume nothing on the road stays truly private.