So, I still receive telemetry information from my old lease car, a Kia e-Niro, to my app. A huge, HUGE privacy issue.
I made sure to remove my profile from the car before turning it in, and doing a factory reset of the car's software.
I can see everything, AC, whether there are doors open, odometer, and above all, location.
Also tried to see if I can turn off the AC, but any commands throw an error, so disabling my account on the car at least did something ๐
I had it in the Netherlands, it's in Poland, and it looks like it's on its way to Ukraine.
Kia, you need to check your security.
Edit:
Holy shit it gets real bad. I can lock and unlock the car.
My brother who was working on buying a Kia EV6 could see and track its location before even signing the paperwork. All you need is the VIN.
I bought a used ev6 and the previous owner profile was still on there.
Had to send info including proof of purchase and ID to have that old account removed.
This was from an actual Kia dealer that made it a certified pre-owned as well. I don't understand why they didn't have the old account removed.
why bother when you'll go through the hassle for them, I guess
Or they could charge you. When I bought a used Ford the dealer wanted me to pay a $100 fee to change the door keypad code, something I did myself in about 2 minutes.
On some websites, you can get the VIN with just the plate number.
Of course, the VIN is also displayed on the exterior of most cars anyway
HO LY FUCK!