BlueDriver OBD2 scanner now requires account login and collects data

The BlueDriver OBD2 scan tool's iOS and Android apps were updated to require a login, requiring users to connect to the internet and share their private data to use the tool.

Background

BlueDriver is an OBD2 scan tool that connects via Bluetooth to an iOS and Android app, to read and clear a car's error codes (check engine light) and view diagnostic data. The BlueDriver device is advertised as being able to work without an internet connection. The app could previously be set up and used without any login, so a user's data would be stored only on their device.

In 2023 the BlueDriver company (aka Root Four Imagination Inc, or Lemur Vehicle Monitors) was acquired by Repairify who also sell other automotive products, which itself is a portfolio company of Kinderhook Industries, LLC, a private investment firm .

Incident

Screenshot of BlueDriver app, showing the requirement to register and log in

Users of the iOS app since the 8.0 release in April 2025 are now given the following message:

As of release 8.0, BlueDriver is requiring users to have accounts to use the BlueDriver product.

Users cannot access the app's functions until they register and log into an account, and agree to store data on the company's servers. Also, some users reported that they were in a situation where they could not access the internet when they first opened this version of the app, leaving them unable to diagnose their vehicle's problem. The BlueDriver support page acknowledges this issue:

You’ll only need an internet connection when you first create and log into your BlueDriver account. After that, you can scan your vehicle and view code info without being online.

Company's response

The company claims that the change "helps keep your data safe" and "prevents unauthorized access". The company does not mention that the data was previously only stored on the users' device and could only be accessed by someone able to unlock the device. The company does state that once the data is stored on the company's servers, they have access to that data:

we don’t have access to your full scan history or reports unless you have an account

Timeline

• 2021: Released iOS app version 7.11, which added the optional ability to register and log in to an account to store data on their servers. The app still worked without logging in.. The version update note read:

Now sync your vehicle scans across your devices by signing up for an (optional) account

• April 25, 2025: iOS app version 8.0 released, adding the requirement to log in. The release note did not mention this change, instead just mentioned "General Performance Enhancements".
• April 28, 2025: iOS app setup instructions changed to say that there is now a mandatory step to log in (original vs updated help page).

Consumer response

Hundreds of customers posted Apple App Store and Amazon reviews about the change. Some users reported that they were in a situation where they could not access the internet when they first opened the new version of the BlueDriver app, leaving them unable to diagnose their vehicle's problem. Other users expressed data privacy concerns. Some examples:

I have two of these Bluetooth Pro OBDII Scan Tool, first one purchased in 12-2017 the second 10-2024. I loved them until early this morning. I had a check engine light on my 2007 Tahoe illuminate. When I started the BlueDriver app on my phone, I got an error message that said I needed to setup a login account before using it. I was way out of cell service range. I NEVER needed internet access before, that was a key feature for me. My only choice was to drive the 12 miles to where I could get cell service, risking possible catastrophic engine or power train failure. When I finally had cell service, I went through the process of creating a login and could not complete the final step as I did not receive the email with the verification code even after multiple attempts. I can no longer trust that this tool I paid for will work for me any more. I can afford to have a tool require internet access for it to work. My recommendation is DON'T BUY. I am now looking for a replacement scanner that won't leave me stranded again.

While this item worked fine for a long time, they have now started requiring internet connections, locations (GPS), and logins to be able to use their software/product. This was never needed before and I have never agreed to this change. I do not want to be involved with a data harvesting/selling organization. Since the only app that can use their hardware is proprietary, there are no other options for alternate apps available. They have effectively stolen the product's usability from everyone. Since they are refusing refunds because of this change, I will be contacting my state's attorney general to see what we can do about either forcing them to roll back the changes or getting refunds. Even IF they weren't selling this information to insurance companies, and whoever else, its still a potential security nightmare.

Privacy Policy

The company's privacy policy has several sections that are relevant to the data now being stored on their servers:

Root Four may change all or part of this Privacy Policy from time to time. An up-to-date version of our Privacy Policy will be posted on www.bluedriver.com and can be found under the “Settings” section of our apps. Your continued use of any of our apps, devices, software, websites or other services after the date of any such revision or replacement constitutes your consent to our collection, use and disclosure of your personal information in accordance with the revised or replaced Privacy Policy.

Vehicle Information – When you use certain of our devices and apps (including our BlueDriver® device and app), we may collect and retain information from the vehicle's onboard computer such as its vehicle identification number (VIN), diagnostic trouble codes, and other vehicle system data including records of the vehicle’s behavior right before the problem started. All of this information helps us to determine what might be wrong with your vehicle – so that we can help get you on the road again faster. When vehicle information is linked to an identifiable User or a specific VIN, we consider this information as your personal information subject to the protections set forth in this Privacy Policy. When vehicle information is anonymized and aggregated so that it cannot be linked to an identifiable User or specific VIN, we treat this information as non-personal information (see below under “Anonymized and Aggregated Data”).

Business Partners and Solution Providers – With your express consent (and only with your express consent), we may provide your personal information to trusted business partners and solution providers that work with us to provide you with additional or enhanced products and services. Third Party Offers – We may present you with offers from trusted third parties to provide an offer or solution to you that may enhance your ownership or driving experience. If we present you with such offers or solutions, it will be on an “opt-in” basis only.

Business Transitions – If we are involved in a reorganization, merger, or the actual or prospective sale of our business or company (or a unit or division) we may disclose personal information to the relevant third party as part of the transaction. In that event, we will ensure that your personal information remains protected in accordance with the principles set out in this Privacy Policy.

We may anonymize and aggregate the data we collect across many users, including vehicle information, and may provide this anonymized, aggregated data to third parties. Such data will not identify you or be able to identify you personally and, specifically, this anonymized and aggregated information will never include your specific vehicle identification number (VIN).

Our websites, products, applications, and services may contain links to third-party websites, products, and services. Our products and services may also use or offer products or services from third parties, such as vehicle repair reports. The information collected by third parties, including location data or contact details, is governed by their privacy policies. Root Four is not responsible for these third-party websites, products or services and encourages you to review the privacy policies of such third party web sites, products and services to understand their information practices.

References

Add a category with the same name as the product, service, website, software, product line or company that this article is about.

The "Incidents" category is not needed.

---

Add your text below this box. Once this section is complete, delete this box by clicking on it and pressing backspace.