What Your Car Knows About You

Start with three places

A connected car uses a network to support services such as remote access or navigation. Its infotainment system is the screen and software for media, navigation, and phone connections. The car, your phone, and the manufacturer account may each hold different settings.

Names and available controls vary by vehicle. If you cannot find a setting, ask the manufacturer what data the service collects, where to change it, and what stops working if you do.

Separate stored data from shared data

A phone connection can copy contacts or save recent destinations in the car. Connected services can also collect data remotely. The FTC describes location and other potentially sensitive information as possible connected-car data, but collection depends on the vehicle and service. Read the FTC overview.

Deleting a paired phone can remove a connection, but it does not necessarily delete data already held by a manufacturer or another service. Likewise, changing a phone permission does not by itself establish what the car sends over its own connection. Ask each provider about its controls and retention.

Review each service before changing it

Read the description of each active feature. Look for a driving-feedback or insurance-related program, location sharing, remote access, and third-party integrations. Check whether enrollment is separate from the main connected-service account.

1. 01

   Identify the feature

   Write down its name and the account or app that controls it. Ask who receives the data and why.

2. 02

   Check the tradeoff

   Read what changes if you turn it off. Remote location, emergency support, or other features may depend on a service or location access.

3. 03

   Save the result

   Record the setting and date. Check again after an account change, service enrollment, or transfer of the car.

For example, a driver who uses remote vehicle location may decide to keep the required service active but decline an optional driving-feedback program, if the vehicle offers that choice. The actual options and effects depend on the provider.

What the GM cases show

In January 2026, the FTC finalized an order resolving allegations that GM and OnStar collected, used, and sold precise location and driving behavior data without adequate notice and consent. The FTC alleged a misleading enrollment process for OnStar and its Smart Driver feature. Read the FTC announcement.

The order applies to the named GM companies and OnStar. It includes a five-year ban on disclosing certain location and driving data to consumer reporting agencies, along with other requirements and exceptions. The order is not a rule that gives every car owner the same controls.

On October 29, 2026, Maryland announced a $220 million multistate GM settlement involving a coalition that included Delaware. The states alleged that driver and location data went to third parties without consumers’ knowledge or consent. The settlement includes consent and privacy program requirements for GM. Read the state announcement.

Check accounts and other drivers

A connected account can offer remote access to a vehicle. Review the people and devices linked to it, including anyone who no longer needs access. Use the provider’s instructions to remove access, and check whether a separate digital key must also be removed.

Give the phone app only the permissions needed for the features you choose. For instance, if an app requests continuous location access, check whether the feature you use needs it. The car’s settings and the phone’s permissions are separate checks.

Use a contact method found on the manufacturer’s official site or in the manual. Keep the response and any request number. Ask about retention periods and exceptions instead of assuming a deletion request removes every record immediately.

Before a sale, trade-in, or return

Before handing over the car, set aside time to remove information from the vehicle and disconnect outside services. The FTC says a factory reset is available in some cars, but subscriptions and app connections can need separate action. Use the FTC checklist.

1. 01

   Save what you need

   Check the manual for the model-specific reset procedure. Save information you need before deleting profiles or resetting the system.

2. 02

   Clear the car

   Remove paired phones, contacts, saved addresses, app logins, and garage-door codes. Use a factory reset if the manual recommends it, then check the relevant screens.

3. 03

   Disconnect accounts and devices

   Remove the vehicle from the manufacturer app and account. Remove digital keys and the car’s Bluetooth pairing from your phone.

4. 04

   Handle subscriptions

   Cancel or transfer services such as a Wi-Fi hotspot or satellite radio. Ask the provider about data requests separately.

Confirm the car no longer appears in your account and check that the vehicle screen no longer shows your information. If a reset does not remove an item, contact the manufacturer or dealer for that model. A reset of the screen alone is not proof that a provider deleted its remote records.

Use a lighter checklist for a rental

A rental car can retain data from a connected phone or navigation system. The FTC recommends limiting permissions and deleting your paired device before returning the car. See the FTC rental guidance.

If you only need charging, the FTC suggests a power adapter instead of the car’s USB port because some USB connections may transfer data. If you connect your phone, permit only what you need. Before return, remove your paired device and any saved destinations. Ask the rental company or consult the manual if you cannot find the controls.

Sources and update

Checked November 2, 2026. Settings and available services vary by model, year, account, and provider. Confirm the current instructions for your own vehicle.

• FTC: connected cars and consumer data
• FTC: GM and OnStar final order
• Maryland Attorney General: multistate GM settlement
• FTC: clear data before selling a car
• FTC: renting a car