Researchers tested 21 late-model cars. 19 contacted third-party domains, including known ad and tracking companies. Some apps sent them your VIN, email, phone, precise location. You can't opt out: they sold you a tracker with wheels and no off switch.

Automatic Transmission — a data-privacy study of connected vehicles