“Did DODGE resale Americans information?”
Verdict
âś…TrueConfidence
Strong, independent, directly relevant evidence.
The claim is supported by the company's own privacy disclosures, which explicitly state that they may sell or share personal information with third parties as defined under regulations like the CCPA.
What We Found
Dodge (as part of Stellantis) discloses in its privacy policies that it may sell or share various categories of customer information—including identifiers, geolocation, and usage data—with affiliates, subsidiaries, dealers, and marketing partners. While this is a standard practice for many automotive companies, it confirms that the company does engage in the sharing and selling of consumer data as defined by privacy laws.
Evidence
The claim that Dodge resells American information is supported by the company's public privacy disclosures. According to documentation analyzed by the Mozilla Foundation's 'Privacy Not Included' project, Dodge/Stellantis explicitly states that, as defined by the California Consumer Privacy Act (CCPA), they may sell or share personal data. This data includes identifiers, usage data, customer records, geolocation, commercial information, and inferences. This information is shared with a broad network of entities, including affiliates, subsidiaries, car dealers, marketing and advertising partners, and analytics providers. It is important to distinguish this standard business practice of data sharing/selling from a 'data breach' or 'unauthorized leak.' While Stellantis did report a 'third-party platform data incident' in September 2025 involving unauthorized access to customer contact information, the primary concern regarding the 'resale' of information refers to the company's stated policy of monetizing or sharing user data for marketing and business purposes, which is a separate, intentional operational practice.
What's Missing or Misleading
The claim does not distinguish between the intentional, policy-based sharing/selling of data for marketing purposes and a malicious data breach. The former is a standard, disclosed business practice, while the latter is a security incident.
Sources Reviewed (2)
Primary Sources
This fact-check was generated by automated AI research. It has not been examined by a human reviewer.