General Motors: A Multibillion-Dollar Privacy Betrayal
The Non-Financial Ledger
There is a contract we believe we have when we purchase a car. It’s a machine, yes, but it is also a private space. It is an extension of our homes, a bubble of autonomy in a world that demands constant connection. It is where you commute to work, take your children to school, visit a doctor, meet a partner, or exercise your right to protest. A senior GM executive once commented on how the development of 4G technology “makes such a difference in how much data we can get into the car and get out of it.” They weren’t talking about improving your navigation. They were talking about extracting your life for profit.
This is the story of that betrayal. General Motors, through its OnStar service, turned millions of personal sanctuaries into mobile surveillance devices. They did it quietly, burying the truth in dense privacy statements and misleading on-screen prompts at the dealership. They told you the “Smart Driver” feature was for you; a game-like tool to earn badges and track your “streaks.” They told you it was “not intended as an assessment of your compliance with driving laws or guidelines.” This was a lie, designed to reassure you while they packaged your every move and sold it to the highest bidder.
Imagine the violation. The FTC complaint details how this system could track a vehicle with terrifying precision as it circled a hospital parking garage. Think about what that means. A trip for chemotherapy. A visit to a mental health professional. An appointment at a reproductive health clinic. All of it logged, stamped, and sent to GM’s servers, then sold to data brokers. The complaint reveals that studies have shown it takes only four randomly selected time and space coordinates to identify a person with 95% accuracy. GM was collecting this data every three seconds, from ignition on to ignition off, on approximately nine million vehicles.
The true cost is not measured in dollars, though the financial harm was real and devastating for many. The true cost is the destruction of trust and the erosion of personal freedom. It is the chilling knowledge that a massive corporation sees your daily life as a resource to be mined, a product to be monetized. When one consumer discovered the scheme and confronted a GM representative, they laid the betrayal bare: “I pay you, now you’re making me pay more to my insurance company.” This is the reality of modern capitalism. You pay for the product, and then you become the product, sold off in pieces without your knowledge or meaningful consent.
“For another consumer whose GM-branded vehicle transmitted Task A data to Respondents, a month’s worth of location data exposed their usual routine between residence and work, including the time and dates when the trips were taken, as well as other habitual facets of daily private life.”
This wasn’t an accident or an oversight. The FTC complaint makes it clear that by 2018, GM’s internal documents cited external “data monetization” as the primary purpose for this massive data collection. They knew what they were doing. They built an intricate system of deception, bundling the surveillance opt-in with essential notifications for tire pressure or oil changes, forcing customers into a corner. Decline, and you risk losing vehicle functions. Accept, and you unknowingly sign away your privacy. This is not a choice; it is coercion.
The damage is profound. It forces every GM owner to wonder if their car is a spy. It makes you second-guess where you drive, who you visit, what you do. It turns a symbol of freedom into a tool of control. This is the ledger of what GM took from its customers: dignity, peace of mind, and the fundamental right to move through the world without being secretly judged and monetized by a corporate machine you paid for.
Societal Impact Mapping
Environmental Degradation
The Federal Trade Commission complaint against General Motors focuses squarely on the immense privacy violations and financial harm inflicted upon consumers. The document does not contain direct evidence or accusations of specific environmental crimes. Its purpose is to detail the illegal collection and sale of personal data, not to conduct an environmental impact assessment.
However, we cannot ignore the immense physical footprint of a digital surveillance system of this magnitude. The collection of precise geolocation data every three seconds from nine million vehicles is not an ethereal process that happens in “the cloud.” It requires a colossal, energy-intensive infrastructure. Every data point transmitted requires cellular network bandwidth. Every piece of information must be received, processed, and stored in massive data centers. These server farms consume vast amounts of electricity for processing and cooling, and require immense quantities of water. The hardware itself has a life cycle of resource extraction, manufacturing, and electronic waste.
GM’s “data monetization” scheme represents a shadow industry built on the back of its primary manufacturing business. This secondary operation has its own undeclared carbon footprint. While customers were calculating the miles per gallon of their vehicles, they had no way to measure the environmental cost of the constant surveillance being performed upon them. This is the hidden ecological tax of corporate surveillance: a silent, resource-draining machine built to turn personal data into profit, with all the environmental externalities that entails.
Public Health
The public health implications of GM’s surveillance are severe and multifaceted. The most direct threat is to the sanctity of private health information. The FTC complaint explicitly states the system was capable of tracking a vehicle with extreme precision, providing an example of a car “as it circled a hospital parking garage.” This capability transforms a vehicle into a tool for exposing some of the most sensitive aspects of a person’s life. Visits to cancer treatment centers, mental health clinics, substance abuse support groups, or reproductive health facilities are no longer private matters.
When this location data is sold to data brokers and “egress licensees,” it can be used for purposes far beyond what any consumer could imagine. It could be cross-referenced with other data sets to build detailed profiles, potentially leading to targeted advertising from pharmaceutical companies or, worse, discrimination from employers or other institutions. The knowledge that one’s health-related movements are being recorded and sold creates a chilling effect, potentially discouraging individuals from seeking necessary care for fear of exposure.
Furthermore, there is a direct impact on mental and financial well-being. The shock and stress of being unexpectedly denied car insurance or facing a massive premium hike, as many GM customers did, is a significant public health issue. For families living paycheck to paycheck, the sudden loss of affordable transportation can trigger a cascade of crises: job loss, inability to get to medical appointments, and intense financial anxiety. This is not just an economic injury; it is a direct assault on the stability and health of working families, caused by corporate greed disguised as a “smart” feature.
Economic Inequality
At its core, GM’s data collection scheme is a mechanism for exacerbating economic inequality. It functions as a regressive tax on its own customers, disproportionately harming those who can least afford it. By selling granular data on driving habits to consumer reporting agencies, GM provided the raw material for insurance companies to re-calculate risk and justify higher premiums or outright denial of coverage.
The people most likely to be flagged by such a system are not the wealthy with multiple vehicles and flexible schedules. It’s the gig worker accelerating to make a delivery on time, the night-shift nurse driving home late, or the construction worker who has to brake hard in city traffic. These are markers of working-class life, now re-branded as risk factors by an algorithm. The system punishes people for the realities of their economic situation, effectively creating a “driving score” that serves as a proxy for class.
This practice creates a vicious cycle. A worker is hit with a higher insurance premium they can’t afford, based on data they never agreed to share. To pay for it, they may have to work more hours, leading to more “risky” driving events, which further solidifies their negative profile. It is a system that extracts wealth from the bottom and funnels it toward corporations. A consumer’s complaint documented by the FTC cuts to the heart of it: they pay GM for a vehicle, only to have GM’s actions force them to pay more to an insurance company. This is a direct transfer of wealth, engineered through deception and a profound abuse of power.
Legal Receipts
Respondents told consumers the driving data they collected from consumers would be used for the consumers’ own assessment of their driving habits. However, Respondents used their tracking technology to sell precise geolocation data and consumer driving behavior data without consumers’ consent. As a result of these practices, consumers have experienced loss of auto insurance, unexpected increases in insurance premiums, as well as the loss of privacy about sensitive locations they visit and their day-to-day movements.
FTC Complaint, Paragraph 9
Commenting at a 2015 investor conference on how General Motors could monetize OnStar as an asset, a GM executive noted that the development of 4G “makes such a difference in how much data we can get into the car and get out of it.”
FTC Complaint, Paragraph 11
If the consumer attempts to decline the OnStar Terms, the screen displays a message noting that declining “will result in deactivation of all services, including Automatic Crash Response, Emergency Services, and Vehicle Diagnostics.” … Faced with this incomplete disclosure, consumers otherwise preferring to limit sharing of their information may throw up their hands rather than lose any unstated functionality of their new vehicles.
FTC Complaint, Paragraph 19
Notably, the Respondents failed to state in these consent screens that consumers’ data will not just be used internally but shared with and sold to third parties (namely, consumer reporting agencies). They also failed to disclose the names of the third parties or the purposes for which the data collected, used or retained.
FTC Complaint, Paragraph 22
Respondents’ talking points were misleading because the OnStar Smart Driver feature was not related to vehicle maintenance or vehicle health at all.
FTC Complaint, Paragraph 24
Another consumer complained to GM customer service representative, “I know that the dealer had me set up OnStar generally, but the actual, um, like, the driving tracking, I was not aware that was part of it, I didn’t even know that existed.” When told by the GM representative that there was an “extra check mark” for OnStar Smart Driver as part of the OnStar enrollment, the consumer responded, “[h]ad I been aware of it, I definitely would not have selected it.”
FTC Complaint, Paragraph 26
This precise geolocation data consisted of latitude and longitude (intended to be precise up to six decimal places by contractual requirements with third parties, which could pinpoint geolocation accuracy to approximately 111 millimeters, or 4.5 inches), along with elevation, heading, current speed, a date and time stamp, and a trip identifier…
FTC Complaint, Paragraph 28
By 2018, however, Respondents were focused on external “data monetization” as the primary purpose for Task A data collection, as referenced in Respondents’ internal privacy impact assessments for Task A. Over time, Respondents expanded the number of vehicles upon which Task A is enabled from around 500,000 vehicles to approximately nine million, as required by one third-party contract.
FTC Complaint, Paragraph 30
As one consumer stated to a customer service representative of Respondents, “When I signed up for this, it was so OnStar could track me. They said nothing about reporting it to a third party. Nothing. […] You guys are affecting our bottom line. I pay you, now you’re making me pay more to my insurance company.”
FTC Complaint, Paragraph 48
What Now?
The Federal Trade Commission has filed this complaint, but the fight against corporate surveillance is fought on many fronts. The executives responsible for these decisions hide behind corporate structures, but their roles are clear.
Corporate Roles on Watch
- Chief Executive Officer, General Motors Company
- President, OnStar, LLC
- Chief Privacy Officer, General Motors
- Board of Directors, General Motors Company
Regulatory Watchlist
These are the agencies with the power to hold corporations like GM accountable. Their actions, or inaction, will determine if this behavior is punished or tacitly approved.
- Federal Trade Commission (FTC)
- Consumer Financial Protection Bureau (CFPB)
- Department of Justice (DOJ)
The Resistance
Regulatory action is slow. Justice is often delayed. Real power lies in our communities. Support local and national organizations fighting for digital privacy rights. Organize with your neighbors to demand stronger consumer protection laws from your state and federal representatives. Share this story. Talk to your friends and family who own GM vehicles. The most powerful tool corporations have is our ignorance and isolation. Our greatest strength is solidarity and shared knowledge.
The source document for this investigation is attached below.
Here is a press release from the FTC’s website about this privacy breach if you’re up for fact checking the writer of your favorite website: https://www.ftc.gov/news-events/news/press-releases/2026/01/ftc-finalizes-order-settling-allegations-gm-onstar-collected-sold-geolocation-data-without-consumers
Explore by category
Product Safety Violations
When companies sell dangerous goods, consumers pay the price.
View Cases →Financial Fraud & Corruption
Lies, scams, and executive impunity that distort markets.
View Cases →


