Automaker apps send VINs and location data to ad networks

Northeastern University and Consumer Reports tested 30 automaker apps and found 28 share data with outside advertising or analytics firms, while seven — including HondaLink and four GM apps — transmit VINs, names, or precise location. Unlike a cookie, a VIN cannot be reset, enabling durable tracking profiles.

• 28 of 30 apps contacted at least one external advertising or analytics company
• Seven apps sent VIN, name, or precise location: HondaLink, Lincoln, MyNissan and four GM apps
• More than 70% of apps contacted at least five tracking or analytics domains
• Recipients include Google, Meta, Microsoft, Snap, Adobe, Amazon, Pinterest, Yahoo and Reddit