By John Strauss
I bought a 2024 Mazda CX5 last year and have enjoyed the
car, now I'm just wondering what it's saying about me.
Recently, I went on the company’s iPhone app for the
first time in a while to see about 71 notifications I had gotten from the car.
Usually, these simply say that I left the doors unlocked (while in my garage).
When I checked the app this time, however, it wouldn’t
let me log in without agreeing to a lengthy set of “connectivity terms and
conditions” and a “connectivity privacy policy.” Together, these total 23 pages
and nearly 10,000 words.
We so often just click through these things, but this
time I asked my AI to take a look and tell me:
What concerns do you see here for consumers? What important
rights are affected, and how common is this in the consumer products industry? What
questions should we be asking?
What I
found wasn’t just a user agreement. It was a glimpse into a much larger
shift—one that every car owner should understand.
Your
Car Is Always Talking
The
agreement makes clear that the vehicle automatically collects and transmits
data on an ongoing basis, whether or not you subscribe to premium features.
That can include identifiers, system data, and, in some cases, location
information.
This isn’t
unique to Mazda. The Federal
Trade Commission has warned that connected cars can collect “a lot of data
about people,” including sensitive geolocation and behavioral information.
And
regulators are increasingly concerned about how that data is used. In fact, the
FTC took action against General Motors over allegations that it collected
and shared drivers’ location and behavior data without proper consent.
Want to
stop the data flow?
You
can—but only by disabling the system entirely, often at the cost of losing
features like emergency services or software updates. That’s not really a
choice. It’s a tradeoff.
Consent
Without a Signature
Buried in
the fine print is a striking idea: By simply using the car, you are deemed to
have agreed to the terms, including ongoing data collection.
No
negotiation. No meaningful opt-in.
This
matters, because most consumers have little idea what’s happening under the
hood. One
survey found that 82 percent of connected car drivers don’t know how much
data their vehicle collects, and nearly as many are unaware of how it’s used or
shared.
Who Really
Holds the Keys?
Thankfully,
regulators are starting to pay attention. The
FTC has signaled that connected vehicle data practices could violate
consumer protection laws if companies collect or share sensitive information
without clear consent.
But policy
is still catching up to technology.
In the
meantime, the burden falls on you and me. We’re being asked to navigate complex
legal agreements just to use products we already own.
If using
your car requires agreeing to terms that can change at any time, limit your
legal rights, and allow ongoing data collection even after you opt out of paid
services, then the nature of ownership itself is changing.
We may
still hold the keys.
But
increasingly, someone else is holding the terms.
Take a
look at this AI analysis of Mazda’s data policy and see what you think:
⚠️ The Big Consumer Concerns (What actually matters)
1. Always-on data collection (with
limited real control)
From your document:
“automatic and on-going collection of Default Data”
Even if you don’t subscribe to services, the car:
- Sends VIN + system data every
time you turn it off
- May include location data
- Can collect more if you opt into
services
👉 The key issue:
You own the car, but Mazda owns the data stream coming from it.
Even more concerning:
- You can’t fully stop data
collection without calling Mazda
- Turning off services ≠ turning
off data
- Data collection can continue even
after you stop paying
That’s a power imbalance.
2. “Consent by ownership” (this is
huge)
“By using a Connected Vehicle… you are confirming that you understand and
agree…”
Translation:
- You didn’t just “buy a car”
- You entered a data
contract—whether you realized it or not
👉 This is becoming common across industries:
- Smart TVs
- Phones
- Appliances
- Cars
Ownership is quietly becoming licensed usage with data obligations
3. You waive major legal rights
This is one of the biggest red flags:
- Mandatory arbitration
- No class actions
- Limited damages
- Short claim window (1 year)
👉 In plain English:
If something goes wrong (data misuse, breach, etc.),
you’ve dramatically reduced your ability to fight back
This is standard—but still very consumer-unfriendly.
4. They can change the deal anytime
“may be amended… without notice… in our sole discretion”
That’s sweeping.
👉 It means:
- Today’s agreement ≠ tomorrow’s
agreement
- You’re in a moving contract
5. Data continues even after
subscription ends
This is subtle but important:
“Mazda may continue to collect certain data… including location data”
👉 So:
- You stop paying
- They may still track
That’s a decoupling of payment and surveillance
6. You’re responsible for everyone
else’s privacy
“your sole responsibility to ensure… passengers… are aware”
This is almost absurd in practice.
👉 It shifts legal burden:
- From corporation → individual
owner
🧠 What rights are really affected?
Here’s the strategic layer:
1. Privacy rights
- Location tracking
- Behavioral data (in some models)
- Vehicle usage patterns
2. Ownership rights
You don’t fully control:
- Your car’s data
- Its connectivity systems
3. Legal recourse
- No class action
- Arbitration required
- Liability capped
4. Control over product functionality
To stop data collection:
- You must disable features
- Possibly lose safety or update
capabilities
👉 That’s a coercive tradeoff
🔁 How common is this?
Very.
This is industry standard now, especially in:
🚗 Auto industry
- Tesla (even more aggressive)
- GM, Ford, Toyota (similar
telematics frameworks)
📺 Consumer tech
- Smart TVs tracking viewing
behavior
- Alexa/Google collecting voice
data
🏠 Appliances
- Smart thermostats
- Connected fridges
👉 The trend:
Products → Platforms → Data ecosystems
Your CX-5 isn’t just a car—it’s a node in Mazda’s data network.
❓ The smart questions to ask (this is where you get leverage)
If you want to think like a strategist, ask:
Data & privacy
- What exact data is collected continuously
vs occasionally?
- Is location stored historically
or just transmitted?
- How long is data retained?
Control
- Can I disable location tracking without
losing safety features?
- Is there a dashboard to
view/delete my data?
Sharing
- Which third parties get access?
- Is data sold, anonymized, or used
for profiling?
Risk
- What happens in a data breach?
- Has Mazda had past incidents?
Value
- What do I actually get in
return?
🤔 Do you even need these services?
You said it yourself:
“I don’t particularly need updates… about whether the door is unlocked.”
Let’s be blunt:
Useful features (maybe worth it)
- Remote start
- Vehicle locator (if you park in
cities)
- Emergency crash notification
- Maintenance alerts
Low-value / gimmicky
- “Your door is unlocked” alerts
- Status notifications you already
know
- Passive data collection for
“improvements”
🎯 Strategic take (this is the honest answer you want)
This isn’t really about Mazda.
It’s about a bigger shift:
👉 You didn’t just buy a car—you bought into a data relationship.
And the trade is:
- Convenience + features
in exchange for - Data + reduced rights + ongoing
consent
🧭 What I’d do in your position
If you want a practical path:
Option 1: Minimalist control (my
recommendation)
- Use the app selectively
- Turn off notifications you don’t
need
- Don’t subscribe after trial ends
- Consider calling to limit or
disable data if it bothers you
Option 2: Full disconnect
- Disable TCU (but lose features)
- Treat it like a “dumb car”
Option 3: Accept tradeoff consciously
- Keep services
- Know exactly what you’re giving
up
⚡ Bottom line
The real issue isn’t the 10,000 words.
It’s this:
👉 Your car is quietly becoming a data product—and the contract reflects
that.
-30-