How Do You Remove Personal Data From a Connected Car in 2026?

Removing personal data from a connected car in 2026 requires more than deleting an account or asking a dealer to wipe its old driver profile. A vehicle may store information in its infotainment system, telematics unit, navigation device, mobile apps, connected-service accounts, roadside-assistance providers, repair shops, fleet operators, and separate databases used for insurance, diagnostics, advertising, or location analytics. The most effective approach is to identify every data relationship, request deletion from each relevant organization, revoke app permissions, remove local profiles, and then replace credentials that were stored in the vehicle. A factory reset alone does not necessarily erase cloud records, data received by insurers, or information retained because of a legal or security obligation. The exact process depends heavily on the make, model, year, subscription service, and whether the vehicle is privately owned, leased, shared, or operated as part of a fleet. This guide explains what can be removed, what may remain, how California’s Delete Act changes the options available to consumers, and why insurance data deserves particular attention.

What Connected-Car Personal Data Usually Includes?

Also worth reading: Who Controls Connected Car Data in 2026 and How Can Owners Protect Their Privacy? · What Are Your Connected Car Data Rights in 2026, and How Can You Control and Monetize Your Vehicle Information? · What Are the Connected Car Data Rules in 2026, and How Do They Affect Drivers, Automakers, and Insurers?

A connected car can generate a record of more than its owner’s name and address. Depending on the vehicle and services, it may retain saved destinations, home and work locations, contact details, phone numbers, Wi-Fi credentials, garage codes, voice recordings, camera images, cabin audio, driving routes, parking events, odometer readings, charging locations, and timestamps showing when the vehicle was used. Telematics systems can also record acceleration, braking, cornering, speed, idling time, hard impacts, seat-belt use, and whether the driver was distracted. These data are sometimes used to diagnose faults, maintain safety features, calculate insurance premiums, support stolen-vehicle recovery, or improve autonomous-driving systems. They can also be used to create profiles based on movement patterns and commercial interests.

The important distinction is between data stored physically in the vehicle and data copied to outside systems. A navigation history saved on the car’s internal storage may be visible to the next owner even after the original account is disconnected. A copy sent to a manufacturer or fleet platform, however, may require a separate deletion request. A roadside provider may keep location records even if the automaker deletes its own copy. An insurer may retain telematics data under its own retention rules, and an employer or vehicle-sharing company may control the account rather than the individual driver. Consumers should therefore treat deletion as a data-governance process, not as a single button. The California Privacy Protection Agency explains that data brokers have begun receiving and processing deletion requests under the Delete Act, but a data-broker request does not automatically reach a car manufacturer, dealer, fleet operator, or insurer.

How Do You Remove Your Data From the Vehicle Itself?

Start by identifying the vehicle’s infotainment system, connected-service account, mobile app, and any active subscription. The owner’s manual or manufacturer support page should provide the correct reset and account-removal procedure; a generic factory reset can remove useful settings without deleting server-side records. Before resetting, record essential information such as garage frequencies, safety PINs, paired devices, and preferred user profiles if those items are difficult to recreate. Remove saved contacts, addresses, browser history, navigation favorites, voice recordings, and stored Wi-Fi passwords. On vehicles that support multiple profiles, delete every profile and verify that the reset applies to all users, not merely the profile displayed on the touchscreen.

Next, sign out of the manufacturer’s app and connected-service platform. Change the account password before signing out, especially if the car was sold, leased to another person, stolen, or used by someone whose access should end immediately. Revoke Bluetooth, location, microphone, camera, contacts, and local-network permissions in the phone operating system. Remove paired phones, key fobs, headphones, and other accessories only if they will not be needed again, because some infotainment systems retain account tokens until the vehicle is sold or serviced. After the physical reset, ask the dealer or manufacturer, in writing, for confirmation of the vehicle-local deletion and the date on which the request was completed. Keep screenshots of the vehicle settings, account pages, deletion confirmations, and reference numbers.

## What Does the California Delete Act Change?

California’s Delete Act gives California residents the ability to submit a deletion request to data brokers, requiring covered businesses to process qualifying requests. It is significant because many personal records are now maintained by companies that a consumer may not immediately recognize as data brokers. A search-and-removal service, online advertising platform, or location-data company may hold information that originated in a connected vehicle but no longer appears in the automaker’s user interface. The law is not a universal command that every company must erase every vehicle record immediately. Instead, it creates a process for submitting a request to covered data brokers and makes deletion an obligation subject to verification, exceptions, and applicable procedures.

A vehicle owner should search the data-broker process used by the relevant California agency or service, submit identifying information carefully, and specify the types of records associated with the vehicle. Avoid sending a full driver’s license, complete payment-card number, or unnecessary authentication secrets through an unverified form. A request should identify the approximate vehicle, account, license plate, and date range where appropriate, while avoiding disclosure of information that is not needed to locate the records. Businesses may need time to verify the requester, locate affiliated databases, and suppress the information from future sales or sharing. Some records may be exempt from deletion because they are needed to complete a transaction, comply with a legal obligation, protect security, or resolve a dispute. The consumer should retain the submission confirmation and follow up if the organization claims that it has no record after a reasonable period.

How Do Insurers and Telematics Companies Fit Into the Process?

Connected-car insurance can involve an insurer’s app, a vehicle telematics service, a manufacturer’s data platform, a fleet manager, or a third-party scorecard provider. The policy may state that the driver consents to the collection of mileage, location, driving events, and time of day, but the policy is not always the only place where those records are stored. An insurer may use the data for underwriting, claims, fraud detection, customer support, or rate reviews, while retaining some records for regulatory, accounting, or dispute-resolution purposes. Asking the insurer to delete every trace may therefore be different from asking it to stop using telematics for a particular policy or to remove identifying information from an active rating profile.

A useful request should ask four separate questions: whether the insurer or its telematics vendor received vehicle-linked data; which categories were collected; whether the data can be deleted rather than merely deactivated; and whether deletion will affect the current policy, claim, discount, or renewal. A consumer who wants to stop future collection should disable the insurer’s telematics connection, remove the app, revoke location and motion permissions, and contact the insurer to confirm the change. A consumer investigating a claim should not delete or alter records prematurely, because the request may conflict with a legitimate investigation. The date of the request matters, because later retention and access rules may differ from those in force when the driving occurred.

The same principle applies to fleet vehicles. An employer, car-sharing operator, rental company, or dealer may own the connected account and have contractual duties to retain records. The individual driver may be able to remove personal contacts and voice data from the infotainment profile, but may not have authority to delete the fleet’s operational history. Written authorization from the account owner or fleet manager may be required. This is one reason vehicle resale or transfer should be treated like a privacy handover, not merely a key handover.

How Can You Stop Connected-Car Data Collection for the Future?

Deletion addresses information already held; prevention addresses what is collected next. Review the automaker’s connected-service settings, the vehicle’s privacy menu, the phone’s permissions, and the insurer’s telematics dashboard. Turn off location sharing, personalized advertising, remote diagnostics, voice-history synchronization, and app-based driving scores when those features are not required. If the vehicle supports a temporary guest mode, use it for visitors, mechanics, or shared trips. Do not connect personal phones to an unfamiliar vehicle through Bluetooth or Wi-Fi if the car’s profile and charging or data-sharing behavior are unknown. For a used car, complete the deletion process before the vehicle is handed to the new owner, and for a leased or employer-provided car, ask the controlling organization for a clean-profile procedure.

Privacy controls can create inconvenience. Disabling location data may affect remote start, stolen-vehicle recovery, navigation, automatic climate settings, or emergency assistance. Removing an app can break features such as digital key access, charging controls, vehicle status, or over-the-air service enrollment. A consumer should not disable safety or emergency functions solely to reduce data collection without checking the manufacturer’s warnings and local law. The best compromise is usually data minimization: retain features that have a clear safety or service purpose, disable optional advertising and marketing features, and request short or purpose-limited retention for the remainder.

## When Should You Act, and What Does It Cost?

Act promptly after a used vehicle is purchased, before a lease ends, when a car is sold, after a phone or insurer is replaced, or whenever someone has had broad access to the vehicle. A prompt request is especially important after a theft, accident, unwanted trip, domestic-abuse safety concern, or discovery that precise location history was shared with an employer or insurer. A consumer may also want to review records before accepting a new policy if telematics could affect a rating, renewal, or claim investigation. Delaying is reasonable only when a legal hold, insurance claim, warranty dispute, or active safety investigation makes deletion potentially destructive; in that situation, document the hold and ask what information will be preserved and for how long.

Most owner-directed steps are free. Manufacturer account deletion, permission revocation, local profile removal, and vehicle reset normally require no payment. A dealer may charge labor for a documented infotainment reset, and a mobile technician may charge a service-call fee, but the amount varies by location and vehicle. A data broker’s consumer request process may be free, although identity verification can take several days or weeks. Insurance telematics devices or services may have setup, subscription, cancellation, or administrative fees, although those terms vary by policy. The cost of not reviewing the system can be higher if a data-linked insurance profile affects pricing, a privacy breach exposes location history, or a new owner gains access to a connected vehicle.

Consumers should request deletion before changing the factory settings that reveal whether a reset worked. Keep a written chronology showing the vehicle identification, account names, organizations contacted, dates, and reference numbers. If a company says it cannot delete a record, ask for the category of data, retention reason, duration, and whether it can be de-identified, restricted from marketing, or no longer linked to the individual. A data system is not automatically unsafe, and deletion is not always technically possible or legally required. The goal is controlled retention, verifiable deletion, and a clear understanding of who still has access rather than an unsupported promise that one reset removed every trace.

Common Mistakes to Avoid When Removing Car Data

n The most common mistake is confusing a factory reset with account deletion. A reset can remove local data while leaving records in an automaker cloud, insurer, fleet, or dealer system. Another mistake is deleting only the primary user profile when the car has guest, valet, family, or work profiles. Changing a password also matters: if the old password remains active in the car or an app, someone may still connect to the vehicle. Some consumers remove the vehicle app but forget that a paired Bluetooth profile, digital key, or Wi-Fi connection can continue to expose limited information.

It is also a mistake to assume that a data-broker request reaches every company. The Delete Act is useful, but it is not a substitute for direct requests to manufacturers, dealers, fleet operators, vehicle-sharing companies, and insurers. Consumers should avoid posting license plates, account screenshots, or authentication information in public forums while seeking help. They should not delete telematics records during a claim without checking the policy or obtaining legal advice. Finally, they should avoid relying on a verbal assurance from a salesperson. A dated email or account confirmation provides evidence that the request was made and identifies who was responsible for processing it.

For most drivers, the practical process is to inventory the accounts and profiles, remove local data, revoke phone permissions, request cloud deletion, and confirm the status of telematics and insurance records. The vehicle’s make, model, year, and ownership arrangement determine the exact menu, so the manufacturer’s current documentation should take priority over a generic online reset. A successful cleanup may leave some legally required or security-related records, but it should substantially reduce unnecessary personal data and prevent a new owner from inheriting unnecessary access. That measured outcome is preferable to the false claim that a connected car can be made data-free by pressing one button.