Two and a half words: post-purchase monetization

I think the GP's question is more rhetorical, or, to put it as a non-rhetorical question:

"Why is it acceptable on any level for my car to become a spyware device on par with Facebook, when I paid an enormous sum to be its owner and controller for my own benefit, and not to become a residual profit stream for ${CAR_COMPANY}?".

Recurring revenue.

What's a dossier like that with on the market when it includes location, Bluetooth IDs of all occupants and private conversations? $5/mo? $10$?

I guess they collect simply everything and don't want to filter out.

But if data wasn't worth anything, they wouldn't bother, right?

Have you asked your ISP the same question

I think a car has a different position in "internet connectivity" than a ISP...

(not to excuse ISP data collection, but implying that a car is as critical for network access as an ISP is nonsense)

The ISP has technically no business knowing what you visited after they transfer the bits to you

I have been living under a rock the last ten years so I thought the EU still had the data retention directive. Between 2006-2014 all ISPs were required to logg traffic in the EU. I am so glad you are right!

https://en.m.wikipedia.org/wiki/Data_Retention_Directive

Many potential forms of ISP data collection are unlawful in the US thanks to wiretap laws, which is why we don't generally see this level of surveillance from ISPs here.

Pretty sure this isn't true. What wiretapping laws do you have in mind? I think ISPs are exempt from most.

https://www.law.cornell.edu/uscode/text/18/2511 Note the narrowness of (2) (a) and the broadness of (1)(a)/(1)(b).

2a is the exception I was thinking of.

Indeed, but I don't think you can "we spy on our users and sell the results" under 2(a).

Bingo.

Signal for example, is also subject to US law. They can be compelled to reveal everything they have in a person. Which they happily do: they hand over a page with the date of account creation and the day it last connected. Which is all they have.

Don't collect information, and you don't have a problem.

Because there's no law preventing it? Ideally there would be regulations making this illegal unless they get the user's consent at the time of purchase as well as allowing users to opt out at any point thereafter.

Money