Your new car could be collecting—and selling—your data