Why a car can't protect your privacy as well as a smartphone

A mobile device with which you spend more time than you want to admit can gather an impressive amount of data about your daily habits. And because it’s your car, not your phone, it can also critique your driving with mathematical precision.

The auto industry is speeding down a road many others have taken. First, it’s computerizing everything, then it’s dealing with privacy implications raised by these advances.

Car manufacturers have an opportunity to learn from other industries — but so far, they’re not.

A new trade-in ritual

A panel at the Washington Auto Show last week discussed an early warning sign: how hard it can be to wipe your information from a car before you sell, trade or donate it.

Think of how a rental car’s Bluetooth-settings screen has become a public ledger of everybody who has driven it — except a car collects so much more data.

A 2017 flier from the Future of Privacy Forum and the National Automobile Dealers Association outlines the variety of information that a modern vehicle can gather, from your location history to your driving habits.

But then it shrugs off the difficulty of resetting all this information: “Consult your owner’s manual, and work with your dealer for details about resetting and removing your information from the system.”

The manual, however, may not shed much light. When you look up instructions on wiping your details from entertainment and navigation systems — see, for instance, the 2018 Chevy Volt, Ford (F) Focus, and Toyota Prius — it will probably leave you guessing about what other data points stay with the car.

In that panel, NADA Executive Vice President Andy Koblenz suggested carmakers provide a simpler solution: “a big reset button.”

Who owns your data?

If the information that a car collected never left it, you might not worry so much about not being able to erase it. But cars with cellular connectivity can transmit that information to manufacturers.

Honda found itself in hot water when one California driver objected to language in a lease for a Fit EV that granted the carmaker the right to track the electric vehicle’s location, after which the company declined to answer all of the Washington Post’s questions about its use of that data.

Honda publicist Chris Martin said Tuesday that the manual for that car specifies that the company only uses data for diagnosis and research and “will not permit others to access it unless such access is legally required.”

But the second page of the lease documentation — what a potential driver sees first — says the company may employ this data “for other legally permissible purposes.”