Source

• The most data-hungry car app is Mercedes-Benz, which collects 17 different data types, followed by BMW (14), Volkswagen (13), Toyota (12), Hyundai (12), Honda (11), and Ford (10). These seven apps share a common pattern in their data collection practices: they all collect users’ names, email addresses, phone numbers, user IDs, device IDs, product interaction data, and diagnostic data. Additionally, all except Ford also collect location data. This suggests that many leading automakers are building comprehensive user profiles through their apps, likely to enable and enhance a wide range of connected features. > - However, the collection of location data and personal identifiers raises important privacy concerns, particularly if users are not fully aware of how their information is being used and shared or the potential risks involved.
• In contrast, Audi’s app stands out as the least data-hungry, as it does not collect any user data. Tesla and Nissan also collect relatively little information. Tesla gathers two diagnostic data types and one related to product interaction, while Nissan collects the same data types as Tesla, with the addition of the device ID. This suggests that these manufacturers may be adopting a more privacy-conscious approach, either by limiting the functionality of their apps or by intentionally designing them to operate with minimal data collection.
• BMW is the only analyzed app that collects audio data and a list of contacts from the user’s phone, address book, or social graph. Meanwhile, the Volkswagen app is the only one that collects payment information, such as form of payment, payment card number, or bank account number.
• Major data leaks have occurred in the automotive industry in the past, and the more information companies collect, the greater the potential risk if that data is compromised. For example, Toyota experienced a significant data breach in 2024, exposing 240 GB of sensitive customer information, including names, email addresses, physical addresses, and vehicle data. Another data leak affecting 800,000 electric vehicles happened in 2025 to the German company Volkswagen Group. > - The data was stored in Amazon Cloud and included information on the cars’ location, battery levels, and engine activation and deactivation. The group that exposed the leak confirmed that the amassed data on the vehicles was easily accessible and could be matched to car owners’ personal data.
• In 2024, the global sales of the analyzed car brands totaled 38.1 million vehicles. Toyota led with 10.8 million units sold, followed by Ford (4.5M), Hyundai (4.1M), Honda (3.7M), Volkswagen (3.3M), Nissan (3.3M), BMW (2.5M), Mercedes-Benz (2.4M), Tesla (1.8M), and Audi (1.7M). Considering that most official car apps began appearing in the mid-2010s, there are now potentially tens of millions of car owners who could use these apps.