The US doesn't just need laws about disclosure of these practices. It needs to mandate that this kind of corporate surveillance must be a clearly labeled opt-in and cannot be mandated by any contract.
Of course the company can say, "If you don't like our product, don't buy it." If I want to keep up with the latest safety upgrades to my vehicle to protect myself and all car companies have the same tracking software, my only option is to look for a "dumb" vehicle. This is blatantly unsafe and irresponsible. So, they're saying that my safety comes with a price other than the $40K I shelled out?