Woman Vows to Buy Only from Private Sellers After Dealership Kept Her Data Despite No Purchase

A woman recently shared her experience on social media, revealing that multiple car dealerships continued to retain her personal information—including her Social Security number—and persistently contacted her by phone, despite the fact that she never purchased a vehicle. She explained that she was only asked to provide her driver’s license when visiting showrooms or taking test drives, after which she began receiving constant sales calls, describing the practice as “predatory.” The woman said she now plans to save money and buy directly from private sellers in the future. She has already contacted the dealerships she visited but did not purchase from, requesting that they delete her personal information or add her to a do-not-contact list. According to standard industry practices, if a customer fills out a credit application, provides a driver’s license for a test drive, or signs any documents at a dealership, that information is typically entered into the dealer’s system for customer tracking, follow-up communications, or to comply with certain recordkeeping requirements. Even if no sale occurs, this data may remain stored in digital systems for extended periods. Federal regulations require dealerships to provide privacy notices explaining how customer information is used and must allow customers to opt out of marketing communications or request deletion of their data. However, even after such requests, records of the initial interaction may still be retained internally. While some state laws specify mandatory retention periods for records related to completed transactions, there is no uniform legal limit on how long dealerships can keep information from prospective customers who did not finalize a purchase. Many commenters online noted that similar experiences are widespread. Some reported having their credit reports checked without authorization, while others pointed out that industries such as real estate and debt collection also frequently engage in persistent follow-ups and prolonged data retention. As a result, some consumers have changed their purchasing habits, opting for private transactions to avoid potential misuse of their personal information.