The CCC had a nice talk last year about the data VW collects and what can be learned from it (all the data was unencrypted accessible): https://media.ccc.de/v/38c3-wir-wissen-wo-dein-auto-steht-vo...

(unfortunately it's in German - but there is an english live translation available)