For example, under the category: Sensitive personal information or data, such as precise geolocation data, biometric information for the purpose of uniquely identifying an individual, account login information, driver's license, and financial information.

... > Purpose of Processing: For location tracking, to identify you, and to provide services to you.

> Other: We may have used and disclosed your Personal Information for other reasons described in the How We Use the Information We Collect and How We Disclose Information sections.

...and the section 'Sensitive Personal Information' for their explanation of limits on what they do with it.

...and:

Your Privacy Rights: 4. Right to Know and Access... You may have the right to request that we provide you with the Personal Information we have collected about you, including the categories of Personal Information; the categories of sources from which the Personal Information is collected; the business or commercial purpose for collecting, selling, or sharing Personal Information; the categories of third parties to whom we disclose Personal Information; and the specific pieces of Personal Information we have collected about you.

Chevrolet has had OnStar since 1996, and has sold data related to it for probably just as long -- this isn't some new phenomenon.

I remember these same arguments echoed back then -- but at least it was a unique happening at the time.

Well, at least one does. Me. The risk of that is the primary thing that is in my mind, over literally every other aspect of the car.

I also wouldn't trust that any controls to not send data would actually stop all data from being sent.