Advice for a GrapheneOS + Android Auto + 2008 Civic Si privacy setup?

CitySlicker

I want to start being a lot more privacy focused. I'm looking into ditching my Samsung A54, getting a Pixel 6 Pro or Pixel 7 and installing GrapheneOS.

But, I also want to have Android Auto functionality in my car. My '08 Civic Si doesn't come with a modern head unit, so I was thinking of getting one of these kits for my car.

From what I understand, GrapheneOS now has official support for Android Auto.

So with this setup, my phone would be hardened for privacy, but what about the aftermarket head unit I buy? Would I have to worry about the head unit collecting and selling information to a third party? Are there any trusted head units that we know for a fact won't collect my info? Or are my worries unfounded?

de0u

CitySlicker Would I have to worry about the head unit collecting and selling information to a third party?

For that to be practical, it would need some way to exfiltrate the information to a buyer, such as an Internet connection. In theory I guess the head unit could contain malware that could hijack your phone into transmitting data, but GrapheneOS is arguably better hardened against that sort of thing than the vast majority of Android phones. And that would be pretty tricky malware to write.

KatieTheDev

If it's made by a reputable company see if they have terms and conditions or a privacy policy on their website