Ford's pledge not to sell driving data, and what it says about your paperwork

What happened

Ford has made a public promise never to sell customer driving data to third-party data brokers, according to The Verge. The carmaker says it will strive to protect customer data by aggregating and anonymising it, and will "provide clear and easy-to-understand information about how we use your personal information". It will still use data to improve safety, but says customers will be able to adjust how much or how little they share.

The timing matters. The pledge follows General Motors agreeing to pay $220 million to settle claims that it illegally sold driver and location information to data brokers. According to The Verge, that agreement requires GM to limit the driving data it collects and to obtain "express consent" from drivers first.

Ford's chief privacy officer, Kristin Jones, wrote in a blog post: "We know that trust is earned." The Verge reports that Ford is trying to position itself as one of the better actors in an industry it describes as rife with shady practices.

How bad is the wider picture?

The article cites some stark numbers. A recent examination of 21 vehicle brands found that every one transmitted data to at least one third-party domain over Wi-Fi. More than half contacted domains that specialise in advertising, tracking or analytics, such as Adobe, LexisNexis and Amplitude. The Verge says those firms gather details about your vehicle or driving behaviour to sell to insurance companies or to target you with ads.

Mozilla, in a recent report, called modern connected cars "the worst category of products for privacy" it had ever reviewed. It found that 92 percent of the automakers it reviewed give drivers little, if any, control over their personal data, and 84 percent share user data with outside parties.

Ford also surveyed more than 1,000 US customers.

What it means for you

You do not need to own a car to take something from this. The article shows how driving data can end up with outside firms, and it is fair to ask the same question about other kinds of personal information.

Paperwork raises that question too: where does a file go when you scan or sign it?

A few habits help. Ask whether a tool needs your file to leave your device at all. Look for plain wording about what happens to your document. And treat any promise, Ford's included, as something to check rather than simply trust. The Verge notes that a company's blog post or public promise is not a legal contract, and that the rules that apply to you are in the official privacy policy and terms.

Where Sheaf fits

On the question this story raises, the point is simple: with Sheaf, your scans and signatures never leave your phone.

That does not make every privacy worry disappear, and it is no comment on how any carmaker handles data. It is just a narrower design choice for the small, sensitive job of putting your name on a document or scanning a paper form. If you are signing or scanning something personal, keeping it on your own device is one fewer place for it to end up.