← IoT Privacy Database

Stellantis Uconnect (Jeep / Ram / Chrysler / Dodge)

Stellantis · Connected Car

Staff Reviewed — a person at DeSpy reviewed this rating.

5.3Surveillance
Index
Policy — what its policy permitsF
Evidence — what research provesD

Uconnect links Jeep, Ram, Chrysler and Dodge vehicles to a cloud account that collects precise location, trip and driving-behavior data, voice commands, and vehicle diagnostics tied to your identity, powering remote start, SOS and stolen-vehicle location. Stellantis's policy permits sharing personal data with partners for marketing, but unlike several rivals it told the Senate it requires a warrant before releasing location data to police. The bigger documented risk here is security: Uconnect was the platform behind the landmark 2015 remote Jeep hijack recall, and Stellantis suffered a large 2025 third-party breach of customer contact records.

Why this rating

The written explanation of this rating is withheld while a person re-reviews it.

What it is

Manufacturer
Stellantis
Category
Connected Car
Model years
2018-present
Market status
Current
Companion app
Uconnect / Jeep / Ram / Dodge / Chrysler brand apps

The evidence 3

Independent research, regulatory action, lawsuits and journalism about how this device handles personal data — the "what actually happens" axis. Each links to its source.

  1. S4Automaker giant Stellantis confirms data breach after Salesforce hack
    Breach report · BleepingComputer · 2025-09

    ShinyHunters exfiltrated ~18 million records of North American customer contact information (names, addresses, phone, email) from a Stellantis third-party Salesforce platform.

    Why it matters here: Compromised the customer records tied to Uconnect / brand-app accounts, though no financial data was reported taken.

  2. Hackers Remotely Kill a Jeep on the Highway - With Me in It
    Major breach · Wired · 2015-07

    Researchers Miller and Valasek remotely took over a Jeep Cherokee via a Uconnect cellular flaw, killing the engine and brakes, prompting a 1.4M-vehicle FCA recall.

    Why it matters here: Demonstrated a severe security failure in the Uconnect platform itself; older and patched, so weighted at half.

  3. S3It's Official: Cars Are the Worst Product Category We Have Ever Reviewed for Privacy
    Ngo review · Mozilla Foundation · 2023-09

    Mozilla flunked all 25 car brands reviewed, including Volkswagen and Audi, for over-collection and selling/sharing personal data.

    Why it matters here: The Stellantis US brands were individually reviewed and failed.

Are you the maker? Respond to this finding

Free. There is no paid or faster path, and nothing about a rating is for sale. Prove you control your company's domain with one DNS record; a person then reads your statement beside our finding and decides whether to publish it.

An email is encrypted at rest and opened only to answer you; it is erased 30 days after we resolve this (or 180 days if still open), and you can erase it sooner. Unproven filings are deleted after 14 days.

Think something here is wrong?

Evidence and research improve when people push back. Tell us what to re-check — a misattributed domain, an outdated classification, a claim about your own app — and a human will review it. Responses can take up to 30 days.

If you leave an email it is encrypted at rest and opened only to answer you — never shared, never used for anything else. It is erased 30 days after we resolve this (or 180 days if it is still open) without you asking, and you can erase it sooner at any time; either way your correction stays, anonymously. Leave it blank and your request is fully anonymous from the start (we store no IP address either way).

Descriptive, cited, not legal advice; ratings are versioned and corrections create a new version. Data from the IoT Info Grabber DB research project, CC BY-SA 4.0.

← Back to the IoT Privacy Database