Google enables optional Gemini data access for Android Auto users

Google is deploying Gemini Personal Intelligence to Android Auto, enabling the assistant to access user data from Gmail, Photos and Calendar. According to ZDNET, this update allows the AI to provide context-based responses by tapping into these services. The feature is optional and remains disabled by default, requiring users to actively select which apps and services to permit. This follows the initial rollout of Gemini across Android Auto and vehicles with Google built-in late last year.

Root cause

The change stems from Google’s expansion of its AI capabilities beyond general knowledge queries. As reported by ZDNET, the company previously launched Personal Intelligence on Android phones and Search, allowing the engine to synthesise information across personal apps. This Android Auto update represents a second phase of that strategy, aiming to reduce friction in driving by providing more relevant answers. The system uses natural language interaction to retrieve scheduled events, flight details or image content.

Attack path

There is no attack path described in the source material. The update is a feature enhancement rather than a security vulnerability. ZDNET notes that if Personal Intelligence is turned off, Gemini’s responses continue to rely on general knowledge alone. The system does not access private data unless the user grants specific permissions for each service. This design ensures that data exposure is controlled by the individual user’s settings.

Affected versions

The update applies to Android Auto devices receiving the latest software release. According to ZDNET, the rollout began today. It affects users who have previously swapped Google Assistant for Gemini. The feature is available for cars with Google built-in as well as standard Android Auto setups. Users must check their device settings to see if the update has been installed and to configure permission levels for each connected service.

Mitigation

• Review Android Auto settings to ensure Personal Intelligence is disabled if you prefer general knowledge responses.
• Selectively grant access to specific apps like Calendar or Photos rather than enabling all services.
• Monitor permission changes after software updates to maintain control over data access.
• Verify that the feature remains opt-in to prevent unintended data sharing.

What it means for organisations

Teams should assess whether employees use Android Auto for work-related communications. Check if corporate policy allows AI assistants to access personal emails or calendars. Inform staff about the opt-in nature of the feature to prevent accidental data exposure. Ensure that device management policies address third-party AI integrations. Review supplier agreements to confirm that data handling complies with internal security standards. Communicate clearly about the risks of sharing sensitive information with AI systems.

What to do and how to stay safe: Google

• Audit your Android Auto permissions to disable Personal Intelligence if unnecessary.
• Restrict access to only essential apps like Calendar for navigation context.
• Monitor Google account activity for unusual data access patterns.
• Wait for vendor guidance before enabling advanced AI features on managed devices.

General security guidance from the TechSec Observer newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

Is Gemini Personal Intelligence enabled by default on Android Auto?

No, it is an opt-in feature and remains off by default until users grant permission.

Which Google services can Gemini access on Android Auto?

It can access Gmail, Photos, Calendar and other native services if permitted.

What happens if Personal Intelligence is turned off?

Gemini continues to provide responses based on general knowledge without accessing private data.