VW Data Leak Exposed Owners’ Movements

It is only a matter of time until all the data Toyota collecting by default leaks out. Make sure to opt-out of Toyota Connected Services as this is how Toyota gets "consent" to collect and sell this data.

 

The Toyota policy has changed since I bought my car in ‘22. In those days it was rather twitchy to turn off connected services, and doing so still left the question about whether Toyota was still collecting data. Under the current agreement they are much more specific.

“To provide consent for Toyota to use your vehicle’s precise location, accept the Master Data Consent for your vehicle in the Toyota app (click here to download - App Store, Google Play). To access the Master Data Consent in the Toyota app, please select the person icon in the top right of the main screen, then select “Account”, then “Data Privacy Portal”.

Declining the Master Data Consent will turn off all data transmission on your vehicle, and you will no longer have access to Connected Services, even if these services were included as part of your vehicle purchase.

If you do nothing, Toyota will continue to use your vehicle’s non-precise location, driving and vehicle health data for internal research and data analysis. You will not have access to Connected Services.”​

 

MSRP on my 4Runner was ridiculous, why does Toyota also needs to monetize my precise or non-precise location? They are not even making that much money on it.

Automakers Sold Drivers' Data for Shockingly Low Amounts of Money

 

Have you “declined the master data consent” yourself?

 

Couple of questions. If I decline, either in the app (if that’s possible after first accepting), or by calling the phone number, specifically which things will I lose. CarPlay? Wi-Fi? In other words, can I still use my phone to stream Spotify and for hands free talk? Google Maps? GPS generally? I seem to recall reading that opting out would eliminate these features.

 

I need to get on this

 

Assuming your 2024 is the same as previous years:
If you opt out, of the things you mentioned above you would only lose the wi-fi. This would include over-the-air updates of the infotainment software and maps.
If you pull the dcm fuse you will lose the hands free microphone, and possibly one of the front speakers. Some folks pull the fuse because they don’t trust “opting out”.

 

.
I think I will opt out of this service.

 

To get map and software updates.

 

Yes, and I also pulled DCM fuse for a good measure. I shouldn't had to have to pull the fuse, but Toyota unlike other manufacturers does not disable cell modem in the DCM module when you opt out, at least not in my case. I think they want to leave the door open for opt-in without replacing DCM module, but leaving that option open is just not good enough for me.

To me, opt out should be stop sending and not stop recording once received.

 

As a Waze user, and having not used the built-in navigation in the time I've had this vehicle, I'm thinking that losing the map updates would not be a great loss. Small price to pay for the increased privacy/security?

I might miss the polite greeting every time I cross a state boundary, but ... probably not for long. ;^)

 

Any ill side effects?

 

In my case built-in GPS still works, the only feature that does not work is search assistance. You can still type in address and get directions.

As I was considering buying other Toyotas, this is not always the case. Newer GPS systems, like one in Toyota Crown, require always-on data connection for GPS to function. Which is insane setup for a vehicle.

Clearly, they don't want me as a customer.

 

I assume some use the hotspot function.

As mentioned the others are for mapping and updates, but you can update via USB if need be.

As for map updates, Toyota seems to be moving/has moved to maps that stream updates from the internet but don’t actually update the local maps to keep one subscribed. (May I suggest a Garmin GPS for those who want a separate unit)

Otherwise, pulling the DCM fuse takes out the microphone with it, I opted out by calling in via the SOS button and left it at that.

There’s plenty of discussion elsewhere here for those who want to read more.

Edit: Data is also used for traffic but the head unit can get and display it via FM radio too.

 

I'd be okay with that.

 

Always a good idea.

 

@Sin4R have a look at the first post in the following thread, paying special attention to the various states of the DCM display in the upper right corner of the infotainment display. Does your 2024 have a similar display? What state is it in?

https://www.4runners.com/threads/my-dcm-disconnection-odyssey.25104/

 

Some reported front speakers no longer working. This was not the case with my Limited with premium sound, in my case all speakers still work. Microphone did go out and that means you can't take calls when your phone is paired to a car as your phone defaults to non-functioning microphone. In my case this is not a big deal as I do not have calls that could not wait until after I am finished driving.

I read somewhere there is wiring harness piggyback that can get this fixed, but have not looked into doing that myself.

 

No bars for DCM, SOS button completely dark. When I just opted out, DCM showed bars and SOS button had a green light. Hence, I was skeptical of them actually opting me out despite telling me on the phone that they did. However, the connected features would not work after opt out.

 

Put the DCM fuse back in and report back on the state of the display.

Have a look at post 22 in that thread. Ultimately what you’re looking for is the DCM signal bars to be both greyed and crossed out.

My understanding (which isn’t precise on this matter) is that disconnecting the DCM is a two-step process, and that there can be a space of days or weeks between the steps. First Toyota opts you out of their services. Second, AT&T cancels the cellular account associated with your vehicle. It’s at that point where the display reads with the DCM bars both greyed and crossed out.

 

I am not going to do that for the following reasons:

1. I believe that driving and location data stored internally in the car, where DCM only transmits it. If I were to re-connect it, a buffer containing past data is likely to be sent out.

2. There is a battery internal to DCM that allows it to function for some time after getting disconnected (days?), pulling a fuse does not result in instant and complete shut-down due to battery operation.

3. Having a history of connected and disconnected states of DCM would allow someone to argue that my car is disconnected selectively and not indiscriminately. Hence, using the state of disconnect as evidence of malicious intentions.

 

I understand your thinking. But…

Have a look at post 164 in the odyssey thread. There are three links at the bottom. Have a look at those too.

The DCM has more than 1 power source feeding it, so pulling the fuse might not disable it. It also may have an internal antenna in addition to the shark fin on the roof.

 

Do you think the master data
consent is an option (or needed) for those who called the number to opt out on a 2021 model year vehicle?

 

That’s a good question. Toyota’s new privacy policy certainly is more strict than previously, and in favor of the consumer. Which is in its way encouraging. But who’s to say that a software “switch” that’s been turned off remotely can’t just as easily be turned on again at the next revision of the TOS? In this regard the new policy is no more effective than the old one. For those who really care the only solution to date is to desolder the SIM card from the DCM circuit board or to bypass the DCM with jumpers. That said —

Purely circumstantial evidence and deduction lead me to believe that once you have achieved “greyed and crossed out” DCM indicator status you are good to go. The radio has been turned off, and can’t be turned on remotely. I believe that to restore DCM function physical access to the vehicle is required.

But what do I know.

The chore of downloading the app, logging in, and declining the master data consent would only take a few moments.

 

I hate to break this to you all, but the idea that by declining an agreement is going to protect you from a data leak is quite misplaced.

The agreement you make with Toyota is about how they handle your data as far as sharing or selling it. It has nothing to do with the data Toyota collects from your car. Your mobile app stricly acts like a head unit that gives you insight into the data they are collecting. I see there are statements about pulling a fuse can stop the car from sending the data, which may (or may not) be the case. I have no idea on that score.

But again, your agreement on data handling with Toyota does not restrict them from gathering that data. In fact the 2024 owners manual on page 9 states:
"You vehicle may transmit the data recorded in these computers to Toyota without notification to you"

In the event of a data breach, your agreement is irrelevant, because the data has been stolen.

 

Jeez. Another thread that reminds me that I'm glad my '19 pre-dates all this stuff. Best of luck with this guys and gals.

 

From Toyota’s privacy statement dated September 25th 2024 (and quoted in post 2 above):

“Declining the Master Data Consent will turn off all data transmission on your vehicle, and you will no longer have access to Connected Services, even if these services were included as part of your vehicle purchase.”
​

Evidently it does have to do with the data Toyota collects.

 

@McSpazatron I called the number to opt out years ago, as I believe you did. Just now I downloaded the app and logged in. Under Account >Data Privacy Portal it showed my “Data Consents” as already declined. So evidently if you opted out under the old privacy policy you remain opted out under the new policy.

 

YOU will no longer have access to Connected Services. It does not say Toyota will no longer have access to that data.

Again, your consent to data sharing is not relevant in a breach, your data is stolen. Just like you don't consent to sharing your car if it is stolen.

 

“Declining the master data consent will turn off all data transmission on your vehicle.” Doesn’t that mean Toyota will not be collecting my data? How are they collecting it if my vehicle isn’t transmitting it?