← IoT Privacy Database

Porsche Connect

Dr. Ing. h.c. F. Porsche AG · Connected Car

Staff Reviewed — a person at DeSpy reviewed this rating.

5.1Surveillance
Index
Policy — what its policy permitsF
Evidence — what research provesD

Porsche Connect accesses and can remotely store real-time location, collects charging sessions with location/time, contract and purchase details, in-app settings, contacts and calendar addresses used for navigation, and transmits in-car voice recordings to Porsche (and a service provider) for speech-to-text. All of this is tied to your Porsche ID. Its parent VW Group has a poor recent data-security record, but Porsche Connect itself has not been the subject of independent privacy research.

Why this rating

Policy permits broad sharing with VW Group affiliates, partners and service providers (sells-data, broker-disclosure), collects precise real-time location plus transmitted voice recordings (sensitive-collection), and uses vague catch-all disclosure language (policy-vagueness). Evidence: unstudied - Porsche Connect has no confirmed brand-specific breach, regulatory action or independent measurement; notably Porsche was NOT among the VW/Audi/SEAT/Skoda models named in the 2024 Cariad location leak, so the evidence score is capped for lack of independent coverage.

What it is

Manufacturer
Dr. Ing. h.c. F. Porsche AG
Category
Connected Car
Model years
2020-present
Market status
Current
Companion app
My Porsche / Porsche Connect app

The evidence 1

Independent research, regulatory action, lawsuits and journalism about how this device handles personal data — the "what actually happens" axis. Each links to its source.

  1. S3It's Official: Cars Are the Worst Product Category We Have Ever Reviewed for Privacy
    Ngo review · Mozilla Foundation · 2023-09

    Mozilla flunked all 25 car brands reviewed, including Volkswagen and Audi, for over-collection and selling/sharing personal data.

    Why it matters here: Category-level context matching Porsche Connect's own disclosed collection of location and voice; not a Porsche-specific finding.

Are you the maker? Respond to this finding

Free. There is no paid or faster path, and nothing about a rating is for sale. Prove you control your company's domain with one DNS record; a person then reads your statement beside our finding and decides whether to publish it.

An email is encrypted at rest and opened only to answer you; it is erased 30 days after we resolve this (or 180 days if still open), and you can erase it sooner. Unproven filings are deleted after 14 days.

Think something here is wrong?

Evidence and research improve when people push back. Tell us what to re-check — a misattributed domain, an outdated classification, a claim about your own app — and a human will review it. Responses can take up to 30 days.

If you leave an email it is encrypted at rest and opened only to answer you — never shared, never used for anything else. It is erased 30 days after we resolve this (or 180 days if it is still open) without you asking, and you can erase it sooner at any time; either way your correction stays, anonymously. Leave it blank and your request is fully anonymous from the start (we store no IP address either way).

Descriptive, cited, not legal advice; ratings are versioned and corrections create a new version. Data from the IoT Info Grabber DB research project, CC BY-SA 4.0.

← Back to the IoT Privacy Database