Contrary to the HN bias, but a way to avoid this if you want to get a new car full of tech gadgets is to get one that runs on Android Automotive. The privacy policy is a normal tech company privacy policy. Other cars come with privacy notices that just say they can give your data to anybody.
Sorry, but a lot of cars, even if they run Android Automotive, maintain a separate TCU/DCM with its own cellular connection that can collect vehicle information independently of Android Automotive.
1. Android Automotive is run by Google, so that entire argument goes out the window immediately, because Google
2. Car companies bypass CarPlay/Android Auto with their own head units with software that executes before the projection software does.