From today's NY Times (but link is the archive.is one):

Opening paragraph sums it up:

If you drive a car made by General Motors and it has an internet connection, your car’s movements and exact location are being collected and shared anonymously with a data broker.

(And yes, most of us probably assume this, but also that doesn't make it okay.)