Consent in Connected Cars: Location Data, Passengers, and Shared Vehicles
Setting up a connected car takes about as long as pairing a phone. In those few taps, the owner agrees to collection that can include precise location history, voice recordings, driving behaviour, and contacts synced from a phone. The car then collects the same data on anyone who drives or rides in it, none of whom were in the showroom for the agreement.
This gap between who consents and who is recorded is now the central question in vehicle privacy. This guide explains what connected cars collect, where consent does and does not reach, and the practical steps owners, borrowers, and fleet managers can take today.
What the car actually records
Modern vehicles log location continuously enough to rebuild a driver's routines: home, workplace, school runs, medical visits. Add cabin microphones for voice assistants, cameras on some models for driver attention, and phone sync that copies contacts and call logs, and the car holds a profile most apps would envy.
Manufacturers state in their privacy documents that much of this data can be shared with service providers, insurers under separate agreements, and data partners. The exact list sits in the terms the owner accepted, which is why reading the data section of those terms, once, with the car in the driveway, is worth the twenty minutes it takes.
Passengers, borrowers, and the consent gap
A passenger has no account, no terms screen, and usually no idea the trip is being logged to someone else's profile. A borrowed car reports the borrower's journeys to the owner, and a sold car can carry the previous owner's destinations in its memory until someone performs a proper reset, a step sellers routinely forget.
Rental and company cars widen the gap further. The renter or employee drives under terms agreed by the rental firm or employer. Good operators disclose the collection in the rental or fleet agreement and limit what they review; the driver who wants to know should ask what is collected and who sees the location history.
Settings and habits that help
Work through the car's privacy settings rather than accepting setup defaults: turn off data sharing for advertising where offered, limit location history retention, unsync contacts if you do not need them in the car, and delete paired phones when you sell or return the vehicle. A factory reset of the infotainment system belongs on every seller's checklist next to clearing the glovebox.
Use the modes manufacturers provide. Guest, valet, and teen driver modes exist precisely because other people use the car, and telling regular passengers, especially in shared family cars, what is collected is a basic courtesy that also happens to be the direction regulators are pushing.
Where the rules are heading
Regulators in several regions have begun treating vehicle data as the sensitive category it is, with enforcement and investigations into how location and driving data are shared with insurers and brokers. Owners should expect clearer choices at setup and easier deletion routes, and should not assume today's buried toggle is the final state of the law.
Until then, the working rule is simple: treat the car like a shared computer with wheels. Review its settings twice a year, clear it fully when it changes hands, and remember that everyone who rides in it has a stake in choices only the owner gets to make.
Related reading
These earlier guides cover connected questions in more depth: Consent Records in a Business Sale: What Buyers Check and Sellers Should Prepare, Consent in Connected Cars: Location Data, Passengers, and Shared Vehicles, and Consent Receipts: What They Are and What They Actually Prove.
Frequently asked questions
Can my car insurer see my driving data without me knowing?
Insurer access normally runs through a separate programme or agreement you sign, such as a usage based policy. What surprises people is manufacturer sharing with data brokers, which is covered, or buried, in the car's own terms rather than the insurance contract.
How do I wipe my data before selling a connected car?
Remove your account and paired phones in the infotainment settings, delete saved destinations and garage codes, then run the factory reset. Check the manufacturer's app afterwards to confirm the car no longer appears on your profile.
Does turning off location services stop all car tracking?
It reduces what is shared through the infotainment system, but safety systems such as emergency call features may still transmit location when triggered. The vehicle manual and privacy settings show which services can and cannot be disabled.
Can passengers ask for their trip data to be deleted?
They can ask the owner or the manufacturer, and deletion routes are improving as regulators press the point. In practice the owner's account controls most of it today, which is why disclosure to regular passengers matters.