{"id":33257,"date":"2024-05-16T10:59:42","date_gmt":"2024-05-16T08:59:42","guid":{"rendered":"https:\/\/www.kaspersky.co.za\/blog\/?p=33257"},"modified":"2024-05-16T11:00:01","modified_gmt":"2024-05-16T09:00:01","slug":"car-manufacturers-silently-sell-user-telematics-data","status":"publish","type":"post","link":"https:\/\/www.kaspersky.co.za\/blog\/car-manufacturers-silently-sell-user-telematics-data\/33257\/","title":{"rendered":"I know how you drove last summer"},"content":{"rendered":"

Early in the movie \u201cThe Fifth Element\u201d, there is a sequence that shows the dystopian nature of the future world: Korben Dallas\u2019s smart taxi fines him for a traffic violation and revokes his license. Back in 1997, this seemed like science fiction \u2013 and it was. Today it\u2019s turning into reality. But first things first.<\/p>\n

Not so long ago, we looked at the potential dangers<\/a> associated with the amount of data modern vehicles collect about their owners. Then, even more recently, an investigation<\/a> revealed what this might mean in practice for drivers.<\/p>\n

It turns out that carmakers, through specialized data brokers, are already selling telematics data to insurance companies, who are using it to raise the cost of insurance for careless drivers. Most alarming of all, however, is that car owners are often kept in the dark about all of this. Let\u2019s investigate further.<\/p>\n

Gamification of safe driving with far-reaching consequences<\/h2>\n

It all started in the US when owners of General Motors vehicles (parent company of the Chevrolet, Cadillac, GMC, and Buick brands) noticed a sharp rise in their auto insurance premiums compared to the previous period. The reason, it transpired, was the practice of risk profiling by data broker LexisNexis. LexisNexis works with auto insurers to supply them with driver information, usually about accidents and traffic fines. But vehicle owners hit by the premium hike had no history of accidents or dangerous driving!<\/p>\n

The profiles compiled by LexisNexis were found to contain detailed data on all trips made in the insured vehicle, including start and end times, duration, distance and, crucially, all instances of hard acceleration and braking. And it was this data that insurers were using to increase insurance premiums for less-than-perfect drivers. Where did the data broker get such detailed information?<\/p>\n

From General Motors\u2019 OnStar Smart Driver. That is the name of the \u201csafe driving gamification\u201d feature built into General Motors vehicles and the myChevrolet, myCadillac, myGMC, and myBuick mobile apps. The feature tracks hard acceleration and braking, speeding, and other dangerous events, and rewards \u201cgood\u201d driving with virtual awards.<\/p>\n

\"OnStar<\/a>

The OnStar Smart Driver safe driving gamification feature is built into myChevrolet, myCadillac, myGMC, and myBuick mobile apps by General Motors. Source<\/a><\/p><\/div>\n

What\u2019s more, according to some car owners, they didn\u2019t enable the feature themselves \u2013 the car dealer did it for them. Crucially, neither General Motors\u2019 apps nor the terms of use explicitly warned users that OnStar Smart Driver data would be shared with insurance-related data brokers.<\/p>\n

This lack of transparency extended to the privacy statement<\/a> on the OnStar website. While the statement mentions the possibility of sharing collected data with third parties, insurers are not specifically listed, and the text generally aims for maximum vagueness.<\/p>\n

Along the way, LexisNexis was discovered to be working with three other automakers besides General Motors \u2013 Kia, Mitsubishi, and Subaru \u2013 all of which have similar safe driving gamification programs under names like \u201cDriving Score\u201d or \u201cDriver Feedback\u201d.<\/p>\n

\"Description<\/a>

According to the LexisNexis website, the companies that work with the data broker include General Motors, Kia, Mitsubishi, and Subaru. Source<\/a><\/p><\/div>\n

At the same time, another data broker \u2013 Verisk \u2013 was found to be providing telematics data to car insurers. Its automotive clients include General Motors, Honda, Hyundai, and Ford.<\/p>\n

\"Description<\/a>

Another broker, Verisk, lists General Motors, Honda, Hyundai, and Ford in its telematics sales service description. Source<\/a><\/p><\/div>\n

As a result, many drivers found themselves, in effect, locked into a car insurance policy with costs based on driving habits. It\u2019s just that such programs<\/a> used to be voluntary, offering a basic discount for participation \u2013 and even then, most drivers opted out. Now it appears that carmakers are enrolling customers not only without their consent, but without their knowledge.<\/p>\n

According to available information, this is currently only happening to drivers in the US. But what starts in the States usually migrates, so similar practices may soon appear in other regions.<\/p>\n

How to protect yourself from data-hungry cars<\/h2>\n

Unfortunately, there is no silver bullet to stop your automobile from harvesting data. Most new vehicles already come with built-in telematics collection as standard. And the number is only going to grow<\/a> so that in a year or two these cars will make up more than 90% of the market. Naturally, the maker of your car won\u2019t make it easy or even possible to turn off telematics.<\/p>\n

If you\u2019re ready to consider the factor of your car collecting data on you for third parties (or, in simple words, spying), then read our post with detailed tips on how you can try to get rid of surveillance by carmakers<\/a>. Spoiler alert: it\u2019s not easy and requires careful study of the documentation, as well as sacrificing some of the benefits of connected cars, so these tips won\u2019t work for everyone.<\/p>\n

As for the scenario described in this post of selling driver data to insurers, our advice is to search the in-vehicle menu and mobile app for a safe driving gamification feature and disable it. It may be called \u201cSmart Driver\u201d, \u201cDriving Score\u201d, \u201cDriver Feedback\u201d, or something similar. US-based drivers are also advised to request their data from LexisNexis<\/a> and Verisk<\/a> to be prepared for nasty surprises, and to see if it\u2019s possible to delete information that has already been collected.<\/p>\n\n","protected":false},"excerpt":{"rendered":"

Vehicle makers sell the data collected by connected cars about their users’ driving habits to data brokers \u2013 who resell it to insurance companies.<\/p>\n","protected":false},"author":2726,"featured_media":33259,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1788,1789,2670],"tags":[109,651,730,423,43,768,422],"class_list":{"0":"post-33257","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-privacy","8":"category-technology","9":"category-threats","10":"tag-apps","11":"tag-cars","12":"tag-connected-cars","13":"tag-mobile-devices","14":"tag-privacy","15":"tag-surveillance","16":"tag-threats"},"hreflang":[{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/car-manufacturers-silently-sell-user-telematics-data\/33257\/"},{"hreflang":"en-in","url":"https:\/\/www.kaspersky.co.in\/blog\/car-manufacturers-silently-sell-user-telematics-data\/27445\/"},{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/car-manufacturers-silently-sell-user-telematics-data\/22764\/"},{"hreflang":"ar","url":"https:\/\/me.kaspersky.com\/blog\/car-manufacturers-silently-sell-user-telematics-data\/11663\/"},{"hreflang":"en-us","url":"https:\/\/usa.kaspersky.com\/blog\/car-manufacturers-silently-sell-user-telematics-data\/30126\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/car-manufacturers-silently-sell-user-telematics-data\/27596\/"},{"hreflang":"es-mx","url":"https:\/\/latam.kaspersky.com\/blog\/car-manufacturers-silently-sell-user-telematics-data\/27384\/"},{"hreflang":"es","url":"https:\/\/www.kaspersky.es\/blog\/car-manufacturers-silently-sell-user-telematics-data\/30037\/"},{"hreflang":"it","url":"https:\/\/www.kaspersky.it\/blog\/car-manufacturers-silently-sell-user-telematics-data\/28849\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/car-manufacturers-silently-sell-user-telematics-data\/37436\/"},{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/car-manufacturers-silently-sell-user-telematics-data\/12388\/"},{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/car-manufacturers-silently-sell-user-telematics-data\/51245\/"},{"hreflang":"fr","url":"https:\/\/www.kaspersky.fr\/blog\/car-manufacturers-silently-sell-user-telematics-data\/21891\/"},{"hreflang":"pt-br","url":"https:\/\/www.kaspersky.com.br\/blog\/car-manufacturers-silently-sell-user-telematics-data\/22626\/"},{"hreflang":"de","url":"https:\/\/www.kaspersky.de\/blog\/car-manufacturers-silently-sell-user-telematics-data\/31280\/"},{"hreflang":"ja","url":"https:\/\/blog.kaspersky.co.jp\/car-manufacturers-silently-sell-user-telematics-data\/36410\/"},{"hreflang":"ru-kz","url":"https:\/\/blog.kaspersky.kz\/car-manufacturers-silently-sell-user-telematics-data\/27742\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/car-manufacturers-silently-sell-user-telematics-data\/33594\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.co.za\/blog\/tag\/cars\/","name":"Cars"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.co.za\/blog\/wp-json\/wp\/v2\/posts\/33257","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.co.za\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.co.za\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.co.za\/blog\/wp-json\/wp\/v2\/users\/2726"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.co.za\/blog\/wp-json\/wp\/v2\/comments?post=33257"}],"version-history":[{"count":3,"href":"https:\/\/www.kaspersky.co.za\/blog\/wp-json\/wp\/v2\/posts\/33257\/revisions"}],"predecessor-version":[{"id":33262,"href":"https:\/\/www.kaspersky.co.za\/blog\/wp-json\/wp\/v2\/posts\/33257\/revisions\/33262"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.co.za\/blog\/wp-json\/wp\/v2\/media\/33259"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.co.za\/blog\/wp-json\/wp\/v2\/media?parent=33257"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.co.za\/blog\/wp-json\/wp\/v2\/categories?post=33257"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.co.za\/blog\/wp-json\/wp\/v2\/tags?post=33257"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}