← IoT Privacy Database

Subaru Starlink

Subaru Corporation · Connected Car

✓ Reviewed

7.0Surveillance
Index
Policy — what its policy permitsF
Evidence — what research provesF

Collects name, SSN, browsing history, geolocation, audio recordings of occupants and driving telemetry, sold to marketing firms, data brokers, LexisNexis and Liberty Mutual; also faced a BIPA biometric-data lawsuit.

Why this rating

Subaru's Starlink collects name, SSN, browsing history, geolocation and in-cabin audio, sold to marketing firms, data brokers, LexisNexis and Liberty Mutual, and its DriverFocus biometric monitoring drew a separate BIPA class action.

What it is

Manufacturer
Subaru Corporation
Category
Connected Car
Model years
2017-present
Market status
Current
Companion app
MySubaru

The evidence 3

Independent research, regulatory action, lawsuits, breaches and journalism about this device — the "what actually happens" axis. Each links to its source.

  1. Ngo review · Mozilla Foundation · 2023-09-01

    Mozilla's *Privacy Not Included* review found all 25 major car brands failed its privacy standards, the worst category it had ever reviewed.

    Why it matters here: Mozilla's car privacy review covers Subaru's Starlink connected-services program.

  2. Ngo review · Mozilla Foundation · 2023-09-01

    Mozilla's review of Subaru's Starlink connected-services privacy practices, flagging extensive data collection and sharing with third parties.

    Why it matters here: Dedicated Mozilla Subaru review details extensive third-party data sharing including LexisNexis and Liberty Mutual.

  3. Journalism · Reddit · 2024-01-01

    Owner-driven discussion thread flagging the scope of Subaru's Starlink data-collection disclosures.

    Why it matters here: Owner discussion thread documents real-world concern over Subaru's data-collection disclosures.

Where your data goes

Third parties this device's data has flowed to, and on what basis. An ended tag means the flow has verifiably stopped — it stays listed for the record.

Descriptive, cited, not legal advice; ratings are versioned and corrections create a new version. Data from the IoT Info Grabber DB research project, CC BY-SA 4.0.

← Back to the IoT Privacy Database