Skip to content
Bramble

Technology

Northeastern and Consumer Reports study finds connected cars and apps share data with third parties

Researchers at Northeastern University, working with Consumer Reports, tested 21 late-model vehicles and 30 companion apps. They found widespread data sharing with third parties, including advertising and tracking firms. The two outlets differ on how many vehicles sent data and how automakers responded.

2 outlets · 1L · 1C · 0R First reported Account updated
Image: The Verge
Image: TechCrunch

1 / 2

The story, neutrally told

Researchers from Northeastern University, in partnership with Consumer Reports, examined 21 late-model vehicles and 30 companion mobile apps to study the privacy of connected cars. The Verge reports that every one of the 21 vehicles sent data to at least one third-party domain over Wi-Fi, and that over half contacted advertising, tracking or analytics domains. TechCrunch instead says 19 of the 21 vehicles sent traffic to at least one third party.

Both outlets say seven of the 30 apps sent sensitive details, such as vehicle identification numbers, phone numbers and precise location, to advertising and tracking companies. Recipients named include Adobe, LexisNexis and Amplitude (The Verge), and Adobe, ContentSquare, Google, Microsoft, Meta, Snap and Yahoo (TechCrunch). Project lead David Choffnes said there is "a lot to be worried about" and called for clearer transparency and opt-in consent rather than opt-out.

Pairing data fields lets advertisers and data brokers build detailed profiles, which TechCrunch says are sold to buyers including insurers and banks. Honda asked its analytics provider Amplitude to delete the location data it had received and changed its app. The Verge describes other automakers' reactions as mixed, while TechCrunch says all but Honda shifted blame elsewhere, often to consumers, according to the researchers.

Every sentence links to the reporting it rests on.

Left1 outlet

Framing
Leads with alarm over the scale of tracking, built around an interview with project lead David Choffnes and the claim that all 21 cars sent data out.
Emphasis
Testing method (Raspberry Pi, Faraday tent), advertising recipients, the Google Android Automotive platform, consumers' lack of control and the case for opt-in.
Leaves out or plays down
Does not say that fewer than all vehicles sent traffic, and does not report that most automakers blamed others.
Charged language
“worse than you think”“data harvesting”“dossiers”
For example
“A team of researchers tested 21 vehicles and found that all of them transmitted data to a third-party domain.” — The Verge
“The results were stark” — The Verge

Centre1 outlet

Framing
Short report that treats the finding as confirming a known problem but shows its scale and how hard it is for consumers to avoid.
Emphasis
Named tech-company recipients, profile-building sold to insurers and banks, and automakers' deflection of blame.
Leaves out or plays down
Leaves out the testing method, the Google platform finding and Choffnes's comments.
Charged language
“The implications aren’t great for consumers”“shifted blame elsewhere”
For example
“That conclusion isn’t new — there have been numerous investigations and lawsuits exposing how driving data is collected and shared with third parties” — TechCrunch
“Regardless of how this data was collected, drivers weren’t informed.” — TechCrunch

Right0 outlets

No right outlet in our sources has covered this story yet.