Even if it's not sold, the car's behavior may expose some user data to external services - navigation systems enriching maps with local data (restaurants, gas stations, charger occupancy, parking spaces, hotels) may connect to services that allow an external entity to identify a car or the person driving it. I don't know Tesla's software enough to make any further observations, but the possibility exists.