You Bought the Car. Why Are You Signing Away Your Rights?

 

By John Strauss

 

I bought a 2024 Mazda CX5 last year and have enjoyed the car, now I'm just wondering what it's saying about me.

 

Recently, I went on the company’s iPhone app for the first time in a while to see about 71 notifications I had gotten from the car. Usually, these simply say that I left the doors unlocked (while in my garage).

 

When I checked the app this time, however, it wouldn’t let me log in without agreeing to a lengthy set of “connectivity terms and conditions” and a “connectivity privacy policy.” Together, these total 23 pages and nearly 10,000 words.

 

We so often just click through these things, but this time I asked my AI to take a look and tell me:

 

What concerns do you see here for consumers? What important rights are affected, and how common is this in the consumer products industry? What questions should we be asking?

 

What I found wasn’t just a user agreement. It was a glimpse into a much larger shift—one that every car owner should understand.

Your Car Is Always Talking

The agreement makes clear that the vehicle automatically collects and transmits data on an ongoing basis, whether or not you subscribe to premium features. That can include identifiers, system data, and, in some cases, location information.

This isn’t unique to Mazda. The Federal Trade Commission has warned that connected cars can collect “a lot of data about people,” including sensitive geolocation and behavioral information.

And regulators are increasingly concerned about how that data is used. In fact, the FTC took action against General Motors over allegations that it collected and shared drivers’ location and behavior data without proper consent.

Want to stop the data flow?

You can—but only by disabling the system entirely, often at the cost of losing features like emergency services or software updates. That’s not really a choice. It’s a tradeoff.

Consent Without a Signature

Buried in the fine print is a striking idea: By simply using the car, you are deemed to have agreed to the terms, including ongoing data collection.

No negotiation. No meaningful opt-in.

This matters, because most consumers have little idea what’s happening under the hood. One survey found that 82 percent of connected car drivers don’t know how much data their vehicle collects, and nearly as many are unaware of how it’s used or shared.

Who Really Holds the Keys?

Thankfully, regulators are starting to pay attention. The FTC has signaled that connected vehicle data practices could violate consumer protection laws if companies collect or share sensitive information without clear consent.

But policy is still catching up to technology.

In the meantime, the burden falls on you and me. We’re being asked to navigate complex legal agreements just to use products we already own.

If using your car requires agreeing to terms that can change at any time, limit your legal rights, and allow ongoing data collection even after you opt out of paid services, then the nature of ownership itself is changing.

We may still hold the keys.

But increasingly, someone else is holding the terms.

Take a look at this AI analysis of Mazda’s data policy and see what you think:

⚠️ The Big Consumer Concerns (What actually matters)

1. Always-on data collection (with limited real control)

From your document:

“automatic and on-going collection of Default Data”

Even if you don’t subscribe to services, the car:

• Sends VIN + system data every time you turn it off
• May include location data
• Can collect more if you opt into services

👉 The key issue:
You own the car, but Mazda owns the data stream coming from it.

Even more concerning:

• You can’t fully stop data collection without calling Mazda
• Turning off services ≠ turning off data
• Data collection can continue even after you stop paying

That’s a power imbalance.

2. “Consent by ownership” (this is huge)

“By using a Connected Vehicle… you are confirming that you understand and agree…”

Translation:

• You didn’t just “buy a car”
• You entered a data contract—whether you realized it or not

👉 This is becoming common across industries:

• Smart TVs
• Phones
• Appliances
• Cars

Ownership is quietly becoming licensed usage with data obligations

3. You waive major legal rights

This is one of the biggest red flags:

• Mandatory arbitration
• No class actions
• Limited damages
• Short claim window (1 year)

👉 In plain English:
If something goes wrong (data misuse, breach, etc.),
you’ve dramatically reduced your ability to fight back

This is standard—but still very consumer-unfriendly.

4. They can change the deal anytime

“may be amended… without notice… in our sole discretion”

That’s sweeping.

👉 It means:

• Today’s agreement ≠ tomorrow’s agreement
• You’re in a moving contract

5. Data continues even after subscription ends

This is subtle but important:

“Mazda may continue to collect certain data… including location data”

👉 So:

• You stop paying
• They may still track

That’s a decoupling of payment and surveillance

6. You’re responsible for everyone else’s privacy

“your sole responsibility to ensure… passengers… are aware”

This is almost absurd in practice.

👉 It shifts legal burden:

• From corporation → individual owner

🧠 What rights are really affected?

Here’s the strategic layer:

1. Privacy rights

• Location tracking
• Behavioral data (in some models)
• Vehicle usage patterns

2. Ownership rights

You don’t fully control:

• Your car’s data
• Its connectivity systems

3. Legal recourse

• No class action
• Arbitration required
• Liability capped

4. Control over product functionality

To stop data collection:

• You must disable features
• Possibly lose safety or update capabilities

👉 That’s a coercive tradeoff

🔁 How common is this?

Very.

This is industry standard now, especially in:

🚗 Auto industry

• Tesla (even more aggressive)
• GM, Ford, Toyota (similar telematics frameworks)

📺 Consumer tech

• Smart TVs tracking viewing behavior
• Alexa/Google collecting voice data

🏠 Appliances

• Smart thermostats
• Connected fridges

👉 The trend:
Products → Platforms → Data ecosystems

Your CX-5 isn’t just a car—it’s a node in Mazda’s data network.

❓ The smart questions to ask (this is where you get leverage)

If you want to think like a strategist, ask:

Data & privacy

• What exact data is collected continuously vs occasionally?
• Is location stored historically or just transmitted?
• How long is data retained?

Control

• Can I disable location tracking without losing safety features?
• Is there a dashboard to view/delete my data?

Sharing

• Which third parties get access?
• Is data sold, anonymized, or used for profiling?

Risk

• What happens in a data breach?
• Has Mazda had past incidents?

Value

• What do I actually get in return?

🤔 Do you even need these services?

You said it yourself:

“I don’t particularly need updates… about whether the door is unlocked.”

Let’s be blunt:

Useful features (maybe worth it)

• Remote start
• Vehicle locator (if you park in cities)
• Emergency crash notification
• Maintenance alerts

Low-value / gimmicky

• “Your door is unlocked” alerts
• Status notifications you already know
• Passive data collection for “improvements”

🎯 Strategic take (this is the honest answer you want)

This isn’t really about Mazda.

It’s about a bigger shift:

👉 You didn’t just buy a car—you bought into a data relationship.

And the trade is:

• Convenience + features
  in exchange for
• Data + reduced rights + ongoing consent

🧭 What I’d do in your position

If you want a practical path:

Option 1: Minimalist control (my recommendation)

• Use the app selectively
• Turn off notifications you don’t need
• Don’t subscribe after trial ends
• Consider calling to limit or disable data if it bothers you

Option 2: Full disconnect

• Disable TCU (but lose features)
• Treat it like a “dumb car”

Option 3: Accept tradeoff consciously

• Keep services
• Know exactly what you’re giving up

⚡ Bottom line

The real issue isn’t the 10,000 words.

It’s this:

👉 Your car is quietly becoming a data product—and the contract reflects that.

-30-