What Modern Cars Know About Your Family

Your car is watching, listening, and reporting. Modern vehicles aren't just transportation—they're rolling data collection platforms. They're connected to cellular networks, running complex software, and packed with sensors. The line between "car" and "IoT device" disappeared years ago, and almost no parent noticed.

Let's break down what your vehicle knows about your family, who's buying that data, and what you can actually do about it.

What Your Car Collects

If you own a vehicle manufactured in the last 5-7 years, it's likely collecting some or all of the following:

Location History: Every trip, every destination, time spent at each location. Where you live, where your kid goes to school, which doctor you visit, where you shop. Your car knows your daily routine better than your spouse does.

Voice Assistant Logs: Conversations with in-car Alexa, Google Assistant, or manufacturer voice systems are stored, transcribed, and in some cases reviewed by human contractors for "quality improvement."

Driving Behavior: Speed, braking intensity, acceleration patterns, cornering speed. These are all used for insurance telematics and "safety scoring." Your car knows when your teen accelerates too hard or brakes too late.

Cabin Microphones and Cameras: Some vehicles, including Tesla and certain BMW and Mercedes models, record interior audio and video. Tesla uses cabin cameras for driver monitoring and Autopilot training data. Sentry Mode records exterior footage. There have been documented cases of Tesla employees internally sharing sensitive recordings.

Biometric Data: Driver profiles, seat position memory, fingerprint access, and facial recognition in newer models. Your car builds a physical profile of who sits where and how they adjust the cabin.

Infotainment Data: What you listen to, navigation destinations, phone contacts synced via Bluetooth, call logs, and text messages displayed on screen. When you pair your phone to your car, you're handing over a copy of your digital life.

Diagnostic Telemetry: Vehicle health metrics, software versions, which features you use and how often. These are sent to the manufacturer continuously.

Who Gets This Data

It doesn't just collect data, it distributes it. Here's who's receiving it:

Manufacturers: Tesla, Ford, GM, Toyota—every major brand. They use it for product improvement, feature development, and increasingly, monetization. Your driving data is an asset on their balance sheet.

Insurance Companies: Usage-based insurance programs like Progressive Snapshot and Allstate Drivewise offer discounts in exchange for continuous monitoring. You're trading your family's privacy for a percentage off your premium.

Data Brokers: Companies like LexisNexis Risk Solutions and Verisk Analytics aggregate driving data and sell it to insurers, marketers, and other third parties.

Law Enforcement: Vehicle data can be subpoenaed in investigations. In some jurisdictions, access doesn't even require a warrant.

Third-Party Apps: Spotify, Google Maps, Apple CarPlay—every app that interacts with your vehicle's infotainment system collects its own data on top of what the car already gathers.

The GM/OnStar Case

If you think this is theoretical, it's not. In 2024, a New York Times investigation revealed that General Motors was quietly collecting detailed driving-behavior data from millions of customers through its OnStar service and selling that information to data brokers LexisNexis Risk Solutions and Verisk Analytics, who then sold it to insurance companies.

Drivers were seeing their insurance premiums increase—or being denied coverage altogether—based on driving data they never knew was being collected. No consent dialog or disclosure. Just silent data transmission from their car to a broker to an insurer.

At least seven class-action lawsuits were filed. In April 2026, a federal judge in the Northern District of Georgia denied GM's motion to dismiss, allowing federal wiretap and privacy claims to proceed in nationwide litigation. The FTC imposed a five-year prohibition on GM selling driving data to consumer reporting agencies. GM was forced to terminate its data-sharing agreements with both LexisNexis and Verisk.

This was General Motors, one of the oldest car makers in America—the company your parents trusted. The makers of the Suburban you see in every school drop-off line.

Tesla deserves a mention here too. Cabin camera recordings used for Autopilot training. Sentry Mode capturing exterior footage. Employees internally sharing recordings that were supposed to be private. But Tesla is the easy target because they wear their tech on their sleeve. GM is a bit scarier because they did it quietly, behind the brand equity of a "traditional" automaker. Every major manufacturer is moving in this direction. GM just got there first and got caught.

The Insurance Telematics Trap

Usage-based insurance sounds like a great deal. Plug in a device or download an app, drive safely, and save money. Who doesn't want to save on insurance while encouraging safe driving?

Here's the trade: your insurance company gets continuous surveillance of every trip your family takes, every brake, acceleration, late-night drive, and highway merge. They build a risk profile that follows your family for years.

The "discount" is your family selling its driving data for pennies on the dollar. And once that data exists in an insurance company's system, you can't take it back. Ever.

The GM case proved this isn't a hypothetical slippery slope. Manufacturers collected the data, sold it to brokers, brokers sold it to insurers, and families paid the price in higher premiums—without ever consenting to any of it.

Parent-Specific Risks

The risks multiply when you think about kids specifically:

Teen Driver Monitoring: Parent apps that track speed and location seem like a safety feature and they can be. But the manufacturer sees everything your parent app sees—and stores it long after you've deleted the app.

Location Profiling: School routes, therapist appointments, custody exchanges, religious services, doctor visits. They're all logged in your vehicle's history. That data creates a map of your family's most sensitive routines.

Synced Phone Data: When your teen pairs their phone to the car via Bluetooth, the vehicle downloads contacts, call logs, and sometimes text messages. That data persists in the car's system even after the phone is disconnected.

Backseat Entertainment: Connected entertainment systems feed into the vehicle's broader data collection pipeline. Viewing habits, app usage, and paired device data are all covered under most manufacturer privacy policies—whether they're actively collecting it today or reserving the right to tomorrow.

The Used Car Data Problem

Here's something you probably haven't thought about: when you sell or trade in your car, your data goes with it.

A 2024 University of Michigan study found that connected vehicle infotainment systems retain personal data—including contact lists, call logs, message previews, navigation history, and device identifiers—after a phone is disconnected. An industry survey found that approximately 80% of drivers don't remove their personal data before selling their vehicle.

That means the next owner of your car—someone you've never met—could have access to your contacts, home address, destinations, and call history. Consumer Reports has documented this issue extensively and published step-by-step deletion guides.

If you've ever rented a car and paired your phone, the same risk applies. Rental fleets are notorious for retaining previous renters' data.

What You Can Do

You don't need to buy an old car to protect your family's privacy (although honestly, not a bad strategy.) Like everything we talk about, it's about informed precaution.

Level 1: Know What You're Driving

Check your vehicle's privacy policy. Actually read it. Most manufacturers bury their data collection practices in dense legal language, but it's all there. Understand what "connected services" means in your owner's manual. Know which apps have access to your vehicle's data. It's tedious, but AI tools can help parse dense legal language quickly. And these are boilerplate so you aren't giving away PII.

Level 2: Opt Out Where Possible

Level 3: Hard Limits

Don't connect your kid's devices to the car's WiFi or infotainment system. Use a standalone GPS or phone mount instead of built-in navigation. Factory reset the infotainment system before selling or returning a lease. Delete all paired devices and stored data.

Now here's where the advice gets complicated—for some families, it's not just about settings and opt-outs.

The Neurodivergent Lens

Autistic and OCD kids often prefer the same routes regardless of what Waze tells you. The car logs this repetition, creating a highly predictable pattern that's easy to exploit. Routine is comforting for your child but it's also a data goldmine.

If a child has a meltdown in the car and a parent uses voice commands or interacts with the infotainment during that moment, that interaction is captured. Cabin microphones record audio. That data is transmitted to servers and potentially reviewed by human analysts. Your family's hardest moments are archived on a corporate server.

The car can also be a regulation space. Climate control, specific music, seat positioning—all digitally controlled now. Correlating dysregulation and regulation patterns paints a very intimate picture of how your child experiences things.

Automation and default-safe configurations matter here. Set it up once so you don't have to think about it in crisis mode.

Who's Behind The Wheel?

Cars will keep getting "smarter". The convenience is great—remote start, over-the-air updates, crash avoidance, predictive maintenance. But data harvesting will scale with every new feature. Your car is a witness to your family's daily life. The question is: who else is listening?

Most of us won't reject automotive technology, but we should know what we're driving before we hand over the keys to our family's data.