I also followed up with some direct queries to JLR about the app and the Pivi software specifically asking which 3rd parties, what data, etc. I'll post any results I get from those. I was hoping as a European based company, there would be a heightened awareness of personal data privacy but the app policies didn't reflect that at all. The nav system looks to be done by a company called HERE Technologies headquartered in Amsterdam. Their privacy policy looked pretty good from my reading so I have a lot less concern about my location data. [/QUOTE]
Looking forward to any responses you get from JLR.

Here is a pretty good company in my experience. I've been using them as an alternative to Google Maps for over a decade and was very happy to find out they were providing nav software for Land Rover. Saves me from having to use Android Auto to run Here from my phone (which defeats the purpose of avoiding Google in the first place).

 

I’m going to delete EVERYTHING and wear a tinfoil hat whenever I get anywhere near that information-gobbling, spy-vehicle. Next thing you know, JLR will require you to get a shot so they can put a chip in your bloodstream to exercise mind control over you. What is this world coming to? In fact, who even needs Navigation? I’m going back to my Hagstrom maps and my Boy Scout compass.

 

OK, we get it. This is not a concern of yours. But it is for others, and I'm sure if your insurance company jacks your rates 20%, or cancels you altogether because JLR or Lexus Nexus reports too many instances of hard acceleration or braking, you might be concerned then. But maybe you're self insured so you can rise above the problems us common folks have to deal with.

Regardless, you've made your point on this thread, we all know you're superior to us, now kindly move on and let it be.

 

Almost three weeks after my request for more information from JLR about the usage of data collected by the InControl app and I've heard nothing. I used the official request process on the JLR web site. Today I contacted my local JLR tech support person to see if they can assist. On a related note, GM stated on 3/22 that they have stopped data sharing with data brokers which was part of the story at the top of this thread. I will continue to update...

 

I’m so Internet illiterate….or naive…..that I’ve always assumed forums like this are a form of social media. We are all socializing on Internet media…..oh well, back to my cave….

 

A year+ into this and no responses obtained from JLR or the local dealership. I ran the privacy policy through Gemini and asked for concerns. Here's the response:


Okay, having reviewed the complete InControl Package Privacy Policy, here is a comprehensive list of the concerning aspects you should be aware of:

Key Concerns Regarding the InControl Package Privacy Policy:

1. Always-On Last Parked Location Tracking (Collection Section): The collection of your vehicle's last-parked location is continuous unless you completely cancel your InControl Services. This default tracking without an easy opt-out raises privacy concerns about constant location monitoring.
   
2. Location Tracking During Emergencies Even Without Full Consent (Collection Section): While understandable for safety, the fact that location data can be collected and transmitted during emergency events (automatic or manual SOS, airbag deployment) even if you declined full InControl Services or turned off Journey Tracking means a baseline level of location tracking exists regardless of your explicit agreement to the full suite of services.
   
3. Broad Collection of Vehicle Operation Information (Collection Section): The extensive list of technical data collected about your vehicle's operation (braking, speed, acceleration, sensor activations, fuel levels, tire pressure, etc.) raises questions about how this detailed information is used, for how long it's retained, and the potential for it to be linked back to your driving habits.
   
4. Potential for Sharing Driving Data for Broad "Ecosystem Improvement" (Uses Section): The stated use of driving data for initiatives to improve the "driving ecosystem" through collaborations with various entities (including potential public-private partnerships) is vague. It's unclear how your specific driving data might be used in these broader initiatives and who might have access to it.
   
5. "Vehicle Data Sharing (VDS)" Opt-In (Uses Section): While presented as a choice, the existence of this opt-in for sharing data to "help us develop and improve our vehicles, products, and services" implies that a significant amount of your vehicle's data is collected and could be used for these purposes if you enable it. The default being off is positive, but understanding the scope of this shared data is crucial.
   
6. Use of Anonymized Data and Potential for De-anonymization (Uses and Disclosure Sections): While the policy states that anonymized data is used for various purposes and third parties are restricted from de-anonymizing it, the risk of de-anonymization, especially with large datasets and advanced analytical techniques, can never be entirely eliminated.
   
7. Marketing Uses of Your Data (Uses and Marketing Sections): Your Covered Information, including contact details, can be used for marketing communications about JLR goods and services, as well as those of their partners (subject to your preferences). The policy also mentions the use of autodialed or prerecorded messages. While you can opt out of marketing, you will still receive InControl-related communications. The statement that non-anonymized geolocation or driving behavior data will not be shared with unaffiliated third parties for their exclusive or independent marketing without consent leaves some ambiguity about other potential sharing scenarios.
   
8. Extensive Data Sharing with Third Parties (Disclosure Section): JLR shares your Covered Information with a wide range of third parties, including service providers, emergency services, retailers, network providers, and marketing services. While necessary for providing the services, the sheer number of potential recipients increases the surface area for potential privacy risks. It's crucial to understand that each of these third parties may have their own data handling practices (though JLR states they have safeguards in place).
   
9. Data Sharing for Third-Party Services You Connect (Disclosure Section): If you connect your InControl account to third-party services, JLR may share various categories of your data with those providers. You need to carefully review the privacy policies of these third-party services to understand how they will use your information.
   
10. International Data Transfers (Disclosure Section): Your Covered Information may be transferred to and stored on servers outside of the United States, including in the UK and EEA. This means your data could be subject to different data protection laws and regulations in those jurisdictions.
    
11. "Remember Me" and "Remember PIN" Functions (Remember Me Section): While for convenience, enabling these features allows anyone using your vehicle to access your stored settings, personal details, and use the InControl Package as if they were you. This poses a significant privacy risk if you share your vehicle.
    
12. Security Limitations (Security Section): While JLR uses reasonable security measures, they explicitly state that the transmission of information over the internet is not completely secure and they cannot guarantee the security of your data when stored with them or transmitted online. All transmission and storage are at your own risk.
    
13. Information from Children (Children's Information Section): While stating the service is not for children under 13 unaccompanied by a guardian, it's important to be aware of this clause if you have children who might interact with the vehicle's infotainment system.
    
14. State Law Addendum (State Law Section): This section provides additional information for residents of specific states, including California, Colorado, Connecticut, etc., regarding the categories of personal information collected, the purposes of collection, and their specific rights (access, deletion, correction, details on direct marketing, opt-out of sales). It's crucial to review this section if you reside in one of these states to understand your enhanced rights.
    

In Summary of Concerns:

The InControl Package Privacy Policy outlines a broad collection of personal and vehicle-related data, including continuous location tracking by default. While some data collection is necessary for the functionality of the services and for safety purposes, the extent of the data gathered and the potential for sharing with numerous third parties for various purposes (including marketing and undefined "ecosystem improvement") warrant careful consideration. The limitations on security and the user's responsibility for authorized users and connected third-party services also highlight potential privacy risks.

It is essential to:

• Carefully manage your privacy settings within the My InControl website and the apps.
• Understand the implications of enabling features like "Vehicle Data Sharing" and "Remember Me/PIN."
• Review the privacy policies of any third-party services you connect to your InControl account.
• Be aware of the continuous last-parked location tracking and the conditions under which real-time location is collected.
• Understand your rights as outlined in the main policy and any applicable state law addendum.

By being aware of these potential concerns, you can make informed decisions about your use of the InControl Package and take steps to manage your privacy preferences accordingly.


Then i asked what concerns I should have if I have not agreed to the privacy policy (which I haven't) and got this response:

If you have not agreed to the Terms and Conditions nor the Privacy Policy for the InControl Package, the amount of data being actively collected and shared with third parties by Jaguar Land Rover (JLR) should be significantly limited.

However, based on the Privacy Policy highlights and the full policy, there are a few crucial exceptions where some data collection and potential sharing might still occur, primarily for safety and emergency reasons:

Data Likely Being Collected (Even Without Agreement):

• Vehicle Identification Information (VIN): This is essential for the vehicle to communicate with JLR systems at a basic level, especially for safety-related functions.
• Vehicle Location Information (in emergency situations): The Privacy Policy explicitly states that even if you decline acceptance of InControl Services, the "SOS Emergency Call" function can be automatically activated upon events like airbag deployment or manually initiated. In such cases, real-time location data, time, and a vehicle identifier are likely transmitted to JLR and/or emergency service providers.
• Basic Connectivity for Emergency Services: The policy mentions that certain limited connectivity between your vehicle and JLR/emergency service providers will continue for emergency purposes. This necessitates the transmission of some basic vehicle and potentially location data.
• Potential Transmission of Telematics SIM Information: The installed and activated Telematics SIM in the vehicle enables the "SOS Emergency Call" service. The network provider will likely be able to identify the SIM and facilitate the transmission of emergency-related data.

Data Less Likely Being Collected or Shared (Without Agreement):

• Last Parked Location: The policy states this is collected unless you cancel your InControl Services. If you haven't agreed, you haven't activated the full services, so this continuous tracking should not be occurring.
• Journey Tracking Data (Real-time location, speed, route, etc.): This requires activation of the "Journey Tracking" function, which is part of the InControl Services you haven't agreed to.
• Submitted Information (Name, address, contact details, etc.): This is provided during account setup, which you haven't done if you haven't agreed to the terms.
• Transaction and Communication Records: These relate to your use of the services and communication with JLR regarding your account, which wouldn't exist without agreement.
• Device Information (from your phone/computer): This is collected when you interact with the My InControl website or apps, which you likely wouldn't be doing if you haven't agreed.
• Vehicle Operation Information (braking, speed history, sensor data, etc. - beyond immediate crash data): This is collected as part of the ongoing InControl Services to improve quality and for diagnostics, which you haven't agreed to.
• Log Information (website/app usage, non-emergency call logs): These track your interaction with the services you haven't agreed to use.
• Feature Information (favorites, settings within apps): These relate to using the InControl features.

Potential Third-Party Sharing (Without Agreement):

• Emergency Services: As mentioned, your location and vehicle information would likely be shared with emergency services if an SOS call is triggered.
• Network Provider: The telecommunications network provider (like AT&T for some features) would be involved in transmitting any emergency-related data.

Important Considerations:

• Vehicle Functionality: Even without agreeing to the InControl terms, your vehicle has inherent safety features. Data related to a crash (like airbag deployment) might be recorded within the vehicle's systems for diagnostic or legal purposes, but this wouldn't necessarily be actively transmitted to JLR or third parties without the InControl agreement (except for the SOS function as described).
• "Declining" vs. Never Engaging: If you actively declined the InControl Services through some in-vehicle prompt or communication with the dealer, JLR might have a record of this declination linked to your VIN.
• Dealer Interaction: The dealer might have collected some basic information during the vehicle purchase, but this would be subject to their own privacy policies and not directly tied to your agreement (or lack thereof) with JLR's InControl terms.

In conclusion, if you have not agreed to the Terms and Conditions and Privacy Policy, the active collection and sharing of your data by JLR should be minimal, primarily limited to essential data for safety and emergency situations (like location during an SOS call) and the necessary network provider to facilitate that emergency communication. The broader data collection and sharing practices outlined in the policy for active InControl subscribers should not apply until you explicitly agree to those terms.

It seems that agreeing to the terms and conditions and privacy policy equates to a lot of concerning data sharing. If I ever receive any feedback from JLR, I'll post here.

 

Says the guy who has posted on here 750 times in 4 years