Beyond the black box: connected car and telematics records after a serious crash
What connected cars, apps and phones may record, who holds it and how to save it
Safety Behind the Wheel Foundation built this guide from National Highway Traffic Safety Administration (NHTSA) and Federal Trade Commission (FTC) guidance, a National Institute of Standards and Technology (NIST) evidence guide, federal regulations, a U.S. Supreme Court ruling and state insurance and privacy sources. Every source is listed at the end.
The black box is only one record
After a serious collision, people often ask about the car’s “black box.” Its formal name is the event data recorder, or EDR. The National Highway Traffic Safety Administration (NHTSA) is the federal vehicle safety agency. It says an EDR records vehicle and occupant data for a very short time around a crash, seconds and not minutes [1]. Federal rules set its standard pre crash window at 5 seconds before impact [2].
The EDR is also limited in what it keeps. Federal rules require owner’s manuals to say that EDRs record no personal data, such as a name or the crash location [2]. The same required statement says that reading an EDR takes special equipment and access to the car or the recorder [2]. A companion article on this site explains what EDR data can reveal.
Many newer cars carry a second, very different system. A telematics control unit is a small computer with a cellular modem and antennas. Telematics simply means sending vehicle data over a wireless link. A 2025 federal rule describes these units as pulling data from GPS, motion sensors and other onboard computers [3]. They can send it out over cellular, Wi-Fi, Bluetooth or satellite links [3]. That data often ends up on a company’s servers, not inside the wreck.
Start by listing every system that might have been recording. The EDR is one item on that list, not the whole list.
Where connected car and telematics records may live
Records from a collision tend to sit in three kinds of places. Some stay inside the car. Some stay on a phone. Others live on servers run by an automaker, insurer, app maker or phone company.
The table below shows common sources. Not every car or family will have all of them.
Comparison compiled by Safety Behind the Wheel Foundation
Where connected car records may be kept
| Possible record | Who usually holds it | What it may show |
|---|---|---|
| Built in connected services | The automaker or its service provider | Location, motion sensor data, other vehicle data [3] |
| Dashboard screen (infotainment) system | Stored inside the car | Synced contacts, saved addresses, past routes [4] |
| Automaker phone app | The automaker and your phone | Your account and remote control of some car features [4] |
| Insurance driving program | Your insurer | Where and when you drove, miles, hard braking, air bag deployment [5] |
| Your cell phone | Your wireless carrier | Time stamped records of the cell sites your phone used [6] |
| Work truck electronic logging device | The trucking company | Date, time, location, engine hours, miles [7] |
| Dashcam | You, on a memory card or cloud account | Video, and sometimes speed and location |
The infotainment system is the screen and computer that runs navigation, music and hands free calls. When you pair a phone, it may copy your contact list. It may also keep addresses you saved and trips you often make, such as to work or home [4].
Insurance driving programs are often called usage based insurance. Washington’s insurance regulator says insurers may use a phone app or a device to track where you drive and how many miles [5]. The same page lists time of day, fast starts, hard stops, sharp turns and air bag deployment [5].
Family location sharing apps and teen driver monitoring apps can also log trips. So can a fleet tracking system in a company vehicle. If anyone in the collision used one, add it to your list.
What these records can and cannot show
Connected records can fill gaps that the EDR leaves open. The EDR covers seconds. A connected system or app may show the whole trip before the collision. It may show where the car started, which way it went and when it stopped moving.
Timing is often the most useful piece. Crash alerts, phone records and app logs each carry time stamps. Lined up together, they can help show when the collision happened and how long help took to arrive. An EDR can even note whether an automatic crash notification system was set off [1].
Automakers may learn about a collision before anyone else. In explaining its crash reporting rules for driver assistance and self driving systems, NHTSA notes a key difference among companies [8]. Some get detailed crash data from their vehicles almost instantly. Others hear about a wreck only when a customer complains [8]. So detailed data may exist on a company server, but not every automaker will have it.
Each record also has limits. A work truck’s logging device saves a full reading at each duty change and each engine start or stop. While the truck keeps moving with no change, it adds a reading about once an hour [7]. Phone records show which cell site a phone connected to [6], which is not the same as a street address. Clocks on different devices may not match. And no data stream explains why a driver did what they did.
Treat each source like one witness. Records that agree build confidence. Records that clash call for a closer look, not a quick conclusion.
Records can change or disappear
Digital records are fragile in ways paper is not. A federal guide on preserving digital evidence notes that digital data can be easy to change [9]. It also warns that devices linked to Wi-Fi, cellular or Bluetooth networks give outsiders a chance to alter evidence before anyone collects it [9]. A connected car is that kind of device.
Records also age out. Each company sets its own rules for how long it keeps data, and those rules vary. Some time limits come from law. Trucking companies, for example, must keep drivers’ duty status records and supporting documents for at least 6 months [10]. Once a keeping period ends, records may be deleted as a matter of routine.
Everyday events can erase or bury data too. A factory reset is built to clear personal data from the car [4]. A repaired car that is driven again keeps logging new trips. A new owner may set up new accounts.
In the first weeks, follow these steps in order:
- List every possible source: the car’s services, apps, insurance programs, phones, dashcams and any work vehicle involved.
- Hold off on resetting, unpairing or deleting anything unless safety requires it.
- Write down each account name, the phone numbers linked to it and the vehicle identification number (VIN).
- Ask each company in writing what it holds for the date of the accident and how long it keeps it.
- If an injury claim or lawsuit is possible, ask a lawyer whether to send a preservation request.
- Keep a log of who you contacted, when, and what each one said or sent.
That log matters. The same federal guide stresses writing down where a file came from and how it was passed along [9]. Safety Behind the Wheel Foundation encourages families to keep the same kind of record. A clear trail helps others trust the data later.
Save first, then wipe
After a car accident, privacy and evidence can pull in opposite directions. Protecting your privacy means clearing your data from a car you are giving up. Saving evidence may mean leaving that data alone for now.
The Federal Trade Commission (FTC) advises people who sell a car to use the factory reset and to cancel or transfer connected subscriptions [4]. That is good privacy advice. But a reset can also wipe saved routes, contacts and other records that might matter in a serious claim.
So think about order. If the collision was minor and no one disputes what happened, privacy may come first. If someone was badly hurt, fault is in question, or a lawsuit is possible, pause. Talk with your insurer or a lawyer before you reset anything, and ask whether someone should copy the data first.
Once those questions are settled, use our guide on what to do before your wrecked car leaves your hands. It covers belongings, unlinking accounts and clearing personal data.
Who holds the data and who may ask for it
The EDR has a clear federal rule. Under the Driver Privacy Act of 2015, EDR data belongs to the vehicle’s owner, or to the lessee if the car is leased [11]. Others may retrieve it only in listed cases. These include a court’s approval, the owner’s consent, certain federal investigations, emergency medical care and traffic safety research [11].
That law covers the EDR. It does not settle who controls connected car, app or phone data. Those records are shaped by each company’s terms, its privacy notice and the laws of your state.
Several parties may want these records after a collision. Insurers on each side may ask. Police may seek them in a serious or criminal case. In a lawsuit, the other side may request them.
Some records carry stronger protection than others. In 2018, the U.S. Supreme Court ruled that the government generally needs a warrant to get past cell site location records from a wireless carrier [6]. Whether that reasoning reaches car data is a question for a lawyer in your state.
If you are in an insurance driving program, read its terms closely. Washington’s regulator suggests asking whether your insurer will let you decide if program data is used to settle a claim after an accident [5].
Privacy: what your car may share
Connected cars can collect a lot. FTC technology staff wrote in 2024 that these cars can gather location, video, biometric and telematic data, along with other personal details [12]. The FTC also warned that location data could reveal trips to sensitive places, such as health clinics, houses of worship or shelters for abuse survivors [12].
Sharing is the bigger worry for many families. In January 2025, the FTC published a proposed order against one major automaker and its connected services company. The FTC alleged that the companies sold precise location and driving behavior data to third parties without consumers’ specific consent [13]. Buyers included consumer reporting agencies that built reports for insurance use [13]. The FTC’s complaint said some consumers lost auto coverage or saw unexpected premium increases [13].
The proposed order would bar the companies from sharing certain location and driving data with consumer reporting agencies for five years [13]. It would require clear consent before they collect or share that data. It would also let consumers ask for a copy of their data, ask that it be deleted, and turn off precise location collection [13].
That case shows why privacy is part of family protection. Driving data that flows to the wrong place could affect what you pay for coverage, or whether you keep it.
State law adds another layer. California, for example, lets consumers limit how businesses use “sensitive personal information,” which includes precise location [14]. Several other states have passed their own consumer privacy laws [14]. Rights differ by state and change often, so check the current rules where you live.
How to ask for your own records
You do not have to wait for someone else to request your data. Many companies offer a way for you to ask for a copy. Getting your own records first helps you know what others may see.
Reviewing a minute by minute record of the worst day of your life can be painful. It is fine to ask a trusted friend, a family member or your lawyer’s office to send the requests and sort the replies. You can look at the details when you are ready.
Frequently asked questions
Does my car record where the crash happened?
The EDR does not. Federal rules say EDRs do not record personal data such as the crash location [2]. Other systems might. A connected services unit, a navigation system, a phone or an insurance app may have logged location [3, 4, 5]. Whether such records exist depends on your car, your subscriptions and the apps you use. Ask each company what it holds for the date of the collision.
Can my insurer use data from its driving app in a crash claim?
It depends on your policy and the program’s terms. Washington’s insurance regulator lists this as a question to ask before you join: will the insurer let you decide whether program data is used to settle a claim [5]? If you already use a program, read its terms and ask the insurer in writing. Your state insurance department can explain local rules.
Can police get my car’s data without my permission?
For the EDR, federal law lists cases where others may get data without the owner’s consent, such as with a court’s approval [11]. For phone location records held by a carrier, the Supreme Court has said the government generally needs a warrant [6]. For other connected car records, the answer can depend on the record, the company and your state. If police ask for records, a lawyer can explain your rights.
How long do companies keep connected car data?
There is no single answer. Each company sets its own keeping period in its privacy notice or terms, and some periods are set by law. For example, trucking companies must keep drivers’ duty status records for at least 6 months [10]. Because data may be deleted on a schedule, ask early and ask in writing.
Should I factory reset my car before it goes to the salvage yard?
A reset protects your privacy, and the FTC recommends it when you give up a car [4]. But it may also erase records that matter. If anyone was seriously hurt or fault is disputed, ask your insurer or lawyer first. Once you know nothing needs to be saved, reset the system and unlink your accounts.
What if a commercial truck was involved in the collision?
Trucks that use an electronic logging device, or ELD, record the date, time, location, engine hours and miles [7]. The trucking company must keep these records for at least 6 months [10]. The truck may also carry fleet cameras or tracking systems. A lawyer can ask the company early to preserve these records.
The bottom line
Recommendation from Safety Behind the Wheel Foundation
Safety Behind the Wheel Foundation encourages families to list every record that might exist and to save it before anything is wiped when the stakes are high. The black box is only the start. A collision in a modern car can leave a trail across the car’s own computers, company servers, insurance apps, phones and, for work trucks, logging devices. Together, these records can help rebuild a timeline when memories are incomplete.
Those same records are sensitive and easy to lose. List what might exist, ask for it in writing, keep a log, and save before you wipe when the stakes are high. Then protect your family’s privacy by closing accounts and limiting what is shared.
Related articles
- What to do before your wrecked car leaves your hands
- Crash reports and evidence: keeping a reliable record after a serious crash
- How to save your dashcam video after a crash
- After a serious crash: fault, settlements, deadlines and your legal rights
- Teen driver monitoring: how to use telematics to coach, not spy
Sources and further reading
- 1National Highway Traffic Safety Administration. Event Data Recorder. Accessed October 2026. nhtsa.gov/research-data/event-data-recorder
- 2Electronic Code of Federal Regulations. 49 CFR Part 563, Event Data Recorders (sections 563.5, 563.7 and 563.11). Current as of October 1, 2026. ecfr.gov/…/part-563
- 3U.S. Department of Commerce, Bureau of Industry and Security (Federal Register). Securing the Information and Communications Technology and Services Supply Chain: Connected Vehicles (final rule). Published January 16, 2025. federalregister.gov/…/securing-the-information-and-communica…
- 4Federal Trade Commission, Consumer Advice. Selling your car? Clear your personal data first. Updated June 23, 2022. consumer.ftc.gov/…/selling-your-car-clear-your-personal-d…
- 5Washington State Office of the Insurance Commissioner. Usage-Based Insurance. Accessed October 2026. insurance.wa.gov/…/usage-based-insurance
- 6Supreme Court of the United States (via Cornell Legal Information Institute). Carpenter v. United States, No. 16-402. Decided June 22, 2018. law.cornell.edu/supremecourt/text/16-402
- 7Electronic Code of Federal Regulations. 49 CFR 395.26, ELD data automatically recorded. Current as of September 25, 2026. ecfr.gov/…/section-395.26
- 8National Highway Traffic Safety Administration. Standing General Order on Crash Reporting (Third Amended General Order, effective June 16, 2025). Page data updated August 17, 2026. nhtsa.gov/…/standing-general-order-crash-reporting
- 9National Institute of Standards and Technology. Guttman B, White DR, Walraven T. Digital Evidence Preservation: Considerations for Evidence Handlers (NIST IR 8387). Published September 2022. nvlpubs.nist.gov/…/NIST.IR.8387.pdf
- 10Electronic Code of Federal Regulations. 49 CFR 395.8, Driver’s record of duty status (paragraph k, retention). Current as of October 1, 2026. ecfr.gov/…/section-395.8
- 11U.S. Code (via GovInfo, 2023 edition). 49 U.S.C. 30101 note, Limitations on Data Retrieval From Vehicle Event Data Recorders (Driver Privacy Act of 2015, Pub. L. 114-94, sec. 24302). govinfo.gov/…/USCODE-2023-title49-subtitleVI-partA-c…
- 12Federal Trade Commission, Office of Technology and Division of Privacy and Identity Protection. Cars & Consumer Data: On Unlawful Collection & Use. Published May 14, 2024. ftc.gov/…/cars-consumer-data-unlawful-collection…
- 13Federal Trade Commission (Federal Register). General Motors and OnStar, LLC; Analysis of Proposed Consent Order To Aid Public Comment (FTC File No. 242 3052). Published January 30, 2025. federalregister.gov/…/general-motors-and-onstar-llc-analysis…
- 14National Conference of State Legislatures. State Laws Related to Digital Privacy. Updated June 7, 2022. Data year: 2022. ncsl.org/…/state-laws-related-to-digital-privacy
This article reflects the safety priorities of protecting evidence and privacy after a serious collision. It is general education, not legal, insurance or financial advice. Rules on data access and privacy vary by state and change over time, so verify details with official sources. For your own situation, contact a lawyer licensed in your state, your insurer, your state insurance department or your state attorney general's consumer protection office. Reviewed October 2026.
Cite this article: Safety Behind the Wheel Foundation. “Beyond the black box: connected car and telematics records after a serious crash.” drivewithcare.org, https://drivewithcare.org/connected-car-telematics-records-after-crash/. Reviewed October 2026.
Special thanks to our contributors
We appreciate the professionals, experts, and community members who share their knowledge and perspectives to help make this resource better. Your insights are always welcome and appreciated.
Have professional expertise, firsthand experience, or a perspective that could make this resource better?
We welcome your input. Your knowledge and experience can help us make this resource more useful, accurate, and meaningful to the people who rely on it.
Thank you. Your contribution is on its way.
We’re grateful you took the time to share your knowledge with us. Our team reviews every contribution with care. If it helps improve this resource, we’ll update the page and recognize you the way you chose.
Keep learning
Safe Driving Resource Center
Guides, self-checks and articles for drivers, parents of new drivers, and families recovering after a crash.
