It gets worse, Auto makers are now building cars with options in them that require an online subscription and disabling access for more than x time will shut off the option(Tesla, BMW, and others do this now). There is talk about putting the car in “Limp home” mode if access is cut (Car will only have 35mph max speed and limited functions, no HVAC, no Radio, etc.)
I know someone who is in engineering at one of the big Auto makers, we where discussing this issue and the person told me that even if you remove the SIM (disable cellular internet) The dealer we still upload all the data from the “black box” to the auto maker when they connect to OBD / CAN diagnostic port in your car during service. The manufacturer’s service software just does that now the tech does not even have to initiate it. Also some dealers can automatically connect using RF to your car as soon as you enter their lot, This can be by Bluetooth, WiFi, and/or the CAN bus via the keyless entry module or TPM (Tire Pressure Monitor). There was an issue a several years ago with hackers gaining access to Jeeps while on the road via RF.
https://www.pcmag.com/news/hackers-remotely-hijack-a-jeep-crash-it-into-a-ditch
A lot of independent mechanics will use the manufacturer scan tool and service applications or use a 3rd party scan tool/applications that is licensed through the manufacturer and still uploads the data.