You get in the car. You plug in your phone. CarPlay lights up the dashboard. You tap a radio app, and somewhere in the background, before a single station starts streaming, your phone has already told an ad exchange where you are, what kind of device you are using, and what you listened to last Tuesday.
This is the reality of most CarPlay radio apps in 2026. And the data backs it up.
CarPlay is now the standard — and the target
CarPlay is no longer a nice-to-have feature. According to Yiche data analyzed in May 2026, CarPlay is factory-installed in 56.8% of new cars launched between July 2025 and April 2026[reference:0]. Among CarPlay users, 51% use the wireless version and another 25% connect by cable — and 85% report being satisfied or very satisfied with it[reference:1].
That ubiquity makes CarPlay a prime target for data collection. Your car is where your daily routines live: commute times, school runs, gym visits, weekend trips. To an advertiser, that pattern is worth more than any other dataset you generate.
What the privacy audits actually show
Exodus Privacy, a European non-profit that audits mobile apps for embedded trackers, has published reports on CarPlay-adjacent radio apps. The findings are not subtle.
- A CarPlay radio app analyzed in June 2026 contained 28 trackers and 19 permissions, including
ACCESS_ADSERVICES_AD_ID— a permission specifically designed for advertising identification[reference:2]. - Another CarPlay Android radio app reported in February 2025 contained 3 trackers and 27 permissions, including
READ_CONTACTS,ACCESS_FINE_LOCATION,AD_ID, andREAD_MEDIA_AUDIO[reference:3].
Read that list again. A radio app requesting access to your contacts and precise location. There is no technical reason a radio player needs either. These permissions exist to power ad targeting and audience profiling.
A radio app should not need your contacts. If it asks, that is not about the radio.
Why privacy in the car matters more than you think
Location data from a car is different from location data from a phone. When an app logs your drive to work every morning at 7:45 AM, it is not just tracking a device. It is profiling a human routine. Combined with other signals — the school you drop your kids at, the doctor you visit, the place of worship you attend — location history becomes a detailed picture of your life that advertisers can bid on in real time.
And it is not only third-party advertisers. Once your data is sent to an ad exchange, you lose all control over who buys it and what they do with it. Data brokers aggregate and resell this information. It can end up in insurance risk models, employment screening tools, and marketing databases you never consented to.
What to look for in a privacy-first CarPlay radio app
Based on the audit data, here is the checklist that actually matters:
- No account required. If a radio app asks you to sign up, it is building a profile tied to your identity. A privacy-first app does not need to know who you are.
- No third-party SDKs. The presence of advertising, analytics, or crash-reporting SDKs is the single biggest privacy red flag. A well-built radio app can run without any of them.
- No location permission requested. Radio is a stream of audio. It does not need to know where you are.
- CarPlay included, not upsold. CarPlay is a safety feature for drivers. It should not be locked behind a monthly subscription.
- No ads on any tier. Ads are the mechanism that funds tracking. An app with no ads has no incentive to track you.
- One-time purchase, not a subscription. Subscriptions require ongoing data flows to justify their price. A one-time purchase does not.
Transistor Radio: built to pass every check
Transistor Radio was designed around a single premise: a radio app should play radio, and nothing else.
- CarPlay is included with the $4.99 lifetime unlock. No monthly fee. No subscription tier.
- No accounts. No sign-up. No identity.
- No third-party SDKs, no trackers, no analytics, no diagnostics.
- No location permission requested. The app does not know where you drive.
- No ads on the free tier or the paid tier.
- One-time purchase model. Pay once, own forever.
If you want to verify any of this yourself, you can audit the app's behavior using tools like Exodus Privacy — the same tool used above. There is nothing hidden to find.
The math for drivers
A subscription radio app at $9.99 per month costs $119.88 every year. Over the five-year life of a typical car, that is nearly $600 — just for the convenience of having a radio in your dashboard.
A one-time purchase at $4.99 costs less than one month of that subscription. And it comes without the tracking, the ads, or the account requirement.
For drivers, the trade-off is not close.
Bottom line
CarPlay is now standard in more than half of new cars. It is also one of the most data-rich environments you enter each day. If you are going to use a radio app in it, choose one that was designed to respect you — not to profile you.