Privacy Risks with Car Rentals

Categories: Cyber Security Awareness Month Security Uncategorized

In today’s era of easy car rentals and rapid advancements in automotive technology, modern vehicles are equipped with a range of features designed to enhance user experience. However, many of these features may require access to personal information, which poses significant privacy risks if not managed properly.

Key features and Their Privacy Risks

1. Bluetooth and USB Connectivity (with Charging) Many modern vehicles are equipped with Bluetooth and USB capabilities, allowing users to sync their devices with the car’s infotainment system for hands-free calling, music streaming, and other features such as Apple CarPlay or Android Auto. However, these features often require access to sensitive data like contact lists and call logs. Once synced, the car may retain this personal information even after the device is disconnected. This means the next person who rents the car could potentially access your personal data, posing a risk of privacy violations.
2. GPS and Navigation Systems GPS and navigation systems are essential tools for drivers, but they also store sensitive data like home addresses, recent destinations, and frequently visited locations. If this data is not deleted from the car’s system, it could be exploited by malicious individuals, putting your personal safety and privacy at risk.
3. Onboard Apps and Connected Services Many vehicles now offer the ability to download apps or subscription-based services such as Toyota’s Safety Connect or Lexus Enform. These services may require your personal information to function, including login credentials, location data, or even financial information.

What Information is at Risk?^[1]

When renting a car, the following personal data could be at risk if not properly removed:

• Contact lists
• Call logs and text messages (hands-free calling)
• Music streaming account logins (e.g., Spotify, Pandora)
• GPS history (locations and routes)
• In-car internet search history
• Wi-Fi identifiers
• Device names and pairing information

How to Protect Yourself ^[2]

1. Be Mindful of Where You Connect Modern cars are essentially computers on wheels, which makes them vulnerable to hacking and data breaches. To protect your personal information, ensure that your devices are running updated antivirus software and the latest firmware.
2. When using Bluetooth or USB to connect to the car’s infotainment system, follow these steps to ensure your data is deleted before returning the rental.

Deleting Bluetooth-Connected Devices

2. Step 1: Access the car’s settings or menu and navigate to the ‘Bluetooth’ or ‘Devices’ section.
3. Step 2: Find your device in the list of paired devices, select it, and choose the option to unpair, delete, or remove the device.
4. Step 3: Verify that other personal data, such as call logs or contact lists, is also removed. If needed, delete this information manually.

Clearing GPS and Navigation History

2. Step 1: Open the navigation menu.
3. Step 2: Go to the settings or stored locations list.
4. Step 3: Delete your navigation history and any saved locations, particularly your home address or frequently visited places.

Managing Onboard Apps and Services

2. Step 1: Navigate to the apps or connected services menu.
3. Step 2: For each app or service, you’ve logged into, be sure to log out and delete any stored data.

A major concern is that not all renters take the necessary precautions to unpair their devices or delete stored data from the car before returning it. This leaves a significant privacy risk for subsequent users and highlights the need for more awareness and better data management practices when using modern rental vehicles.

If you have questions about information provided in this article or about cybersecurity, please contact an IT Specialist in Agriculture IT!

References

[1] https://www.nationwide.com/privateclient/loss-prevention/articles/protect-your-privacy-in-a-rental-car#:~:text=Your%20sensitive%20data%20could%20be,system%20via%20Bluetooth%20and%20USB.&text=When%20you%20link%20your%20device,you%20have%20returned%20the%20vehicle.&text=You%20can%20help%20protect%20yourself,risks%20and%20safeguarding%20your%20data.

[2] https://fleetdefender.com/are-you-leaving-your-personal-data-on-rental-cars/#:~:text=Step%201:%20Navigate%20to%20the,settings%2C%20contacts%2C%20and%20more.