The Keys We're Handed: AI, Customer Data, and Trust in Automotive Retail

Tim Hayden, Founder and CEO of BrainTrust Partners, examines how dealerships can use AI and customer data while respecting privacy, managing access and preserving the trust behind every customer relationship.

When a customer hands a dealership their keys for a service appointment, they're trusting that the car comes back the way it left, or better with maintenance and repairs executed. The customer trusts that nobody will sift through the glovebox or copy the garage door opener codes.

Such unspoken contracts of respecting privacy are the foundation of the service drive, and often why customer relationships grow through fixed ops, not sales, perhaps.

Customer data works the same way. Every credit application, trade-in appraisal, service history, and text thread is a set of keys. As dealer groups adopt AI, the question isn't whether they can do more with those keys. They clearly can and have in the past – the question is whether customers would be comfortable if they could see what happens to their data.

At BrainTrust Partners, that question sits at the center of nearly every automotive engagement we take on.

Here's what we've learned.

Automotive has more data than it realizes, and more exposure than it admits

A typical dealer group runs its business across a dozen or more systems: the DMS, the CRM, inventory and appraisal tools, digital retailing platforms, equity mining, service scheduling, marketing automation, and a growing number of AI vendors. Each one holds a piece of the customer. None holds the whole picture.

Fragmented management of data is a problem for accuracy in analytics and growing revenue, and it's a bigger problem for security. Picture a house where every room has its own door to the street, and each door has a different lock made by a different locksmith. You can't secure a house like that by checking one door, and popular cybersecurity tools fail to monitor the vulnerabilities such mismanagement creates. You need to know where every door is and who holds every key and when/where keys are used.

Most dealership groups can't answer a simple question: Where does our customer data go, and who can reach it? Before AI enters the picture, that question needs an answer. Once AI is woven into all operations, that answer becomes urgently needed, because AI tools are hungry and often not aligned with each other. They want to see everything, and many of them send what they see to someone else's servers.

The ethics question is really a custody question

Discussions of AI ethics often drift toward the abstract: bias, fairness, transparency. Those matter. But in automotive retail, the most practical ethical question is custody. Who holds the data while the AI trains and “decisions” on it?

When a dealership pipes customer records into a public AI model to draft follow-up messages or score leads, it may be handing those keys to a third party whose terms of service few people read. Financial details, credit tiers, and household information are regulated for good reason. The FTC Safeguards Rule, state legislated privacy laws, and lender requirements don't pause because a tool is convenient.

That's where dealerships and associated businesses have opportunities to employ private, secure AI systems using open-weight models that run inside the client's own environment. In such AI operations, the model comes to the data, rather than the data going to the model.

Knowing the household without overstepping it

One of the most valuable things a CDP and/or AI can do for a dealer group is recognize that the Camry owner at one rooftop and the F-150 buyer at another live in the same household. Cross-rooftop householding changes how a group serves customers, as service reminders get consolidated, trade-in timing gets smarter, and no customers receive three conflicting offers in one week.

Still, there's a line between being helpful and being unsettling. A customer who gets a timely oil-change reminder feels known and respected. A customer who gets an offer that reveals the dealership has pieced together their spouse's credit profile feels watched. Ethical use of customer data means designing for the caring experience and guarding against being creepy.

Micro-audience segmentation should sharpen relevance and make experiences meaningful, not reveal how much the business knows or has access to monitor. Consent and preferences need to travel with the customer across every rooftop and every system, not live in one silo while other tools ignore them, and dealers must ensure such information is responsibly handled.

This is where vendor partnerships matter, between each other and alongside the mutual client. Systems like CDPs and CRMs give a dealership group one place to collect, govern, and honor customer consent in real time between all other data sources. Data warehouses can provide a secure foundation where data can be unified and analyzed without scattering copies across vendors. Together, your marketing automation, CRM or CDP and your data warehouse should perform like a house that has one front door with a good lock and a clear list of who holds a key.

Trust is the actual product

Car buying already carries a trust deficit. Customers walk into showrooms braced for games and they question all but everything they are told by dealer staff. AI can create a larger gap in trust or help tighten customer confidence. AI dilutes trust when it's used to squeeze a customer: pricing algorithms that exploit urgency, chatbots that pretend to be people, data sold or shared without clear permission. AI may help build trust when it makes the experience faster, more honest, and more personal in ways customers welcome, such as accurate service estimates, fewer repeated questions, and offers that reflect what they actually own and need.

The dealer groups that win the next decade won't be the ones with the most AI, but the ones customers trust with their keys.

Where to start

For groups beginning this journey, we recommend three steps before reaching out to vendors or booking a demo:

1. Meet with your team members who lead variable operations, fixed operations, and F&I. They know their tools and what information is entered and/or managed by each – have them list this information and 3-5 repetitive workflows or meetings they host each week.
2. Discuss the fundamentals of security with the entire team: password keepers, screensavers, multi-factor authentication, local regulations, current cyber security and systems/subscriptions allowed for sharing or analyzing company information.
3. Ask your team to list the current ways each of them use AI personally, and if they have current use cases at work. This isn’t the opportunity to be critical of anyone using ChatGPT, but to start where people are today, to map what and where AI can help ahead.

Think of data as plumbing and locks. Good plumbing is why few people think about the water poured from their faucets, and good locks are why people sleep at night. In automotive retail, that quiet confidence is worth more than any clever algorithm or losing the trusted human touch that’s defined the industry since it started.