JoNova linked to this disturbing little article explaining what legal rights you give away merely by being a passenger in a modern Subaru vehicle:
Subaru is a Japanese car company started back in the 1950s. Their all-wheel drive, sporty SUVs and cars are popular with outdoor types and the LGBT+ community (and your privacy researcher’s Mom … Mom swears by Subaru and has since the 1980s). Popular models in the Outback, Forester, Crosstrek, Impreza, Legacy, the sporty WRX, and the electric Solterra. The MySubaru app and Subaru’s Starlink connected services offer up all the usual connected car things like remote start/stop, lock/unlock, honk your horn and flash your lights from bedroom, automatic collision notification, multimedia services like navigation and news, trip logs, and a way to manage other people who might drive your Subaru with boundary, speed, and curfew alerts. So, do we love Subaru’s privacy? Not really. But hey, they aren’t the worst car company we reviewed, so there’s that.
Here’s something you might not realize. The moment you sit in the passenger seat of a Subaru that uses connected services, you’ve consented to allow them to use — and maybe even sell — your personal information. According to their privacy policy, that means things like your name, location, “Audio recordings of Vehicle Occupants“, and inferences they can draw about things like your “characteristics, predispositions, behavior, or attitudes“. Call us bonkers, but we don’t think that simply sitting in the passenger seat of someone’s Subaru should mean you consent to having any of your personal information use for, well, pretty much anything at all. Let alone potentially sold to data brokers or shared with third party marketers so they can target you with ads about who knows what based on the the inferences they draw about you because you sat in the back seat of a Subaru in the mountains of Colorado. We’re gonna really call out Subaru for this, because they lay it out so clearly in their privacy policy, but please know, Subaru isn’t the only car company doing this sort of icky thing.
If you go read Subaru’s privacy policy (or don’t, we did it for you, you can just read our review here), you’ll see at the very start they say this: “This Privacy Policy applies to each user of the Services, including any ‘Vehicle Occupant’, which includes each driver or passenger in a Subaru vehicle that uses Connected Vehicle Services, such as Subaru Starlink (such vehicle, a ‘Connected Vehicle’), whether or not such driver or passenger is the vehicle owner or a registered user of the Connected Vehicle Services. For the avoidance of doubt, for purposes of this Privacy Policy, ‘using’ the Services includes being a Vehicle Occupant in a Connected Vehicle.” So yeah, they don’t want there to be any doubt that when you sit in a connected Subaru, you’ve entered the world of using their services.
