My qualm with all this is that the Q/A changes substantially if you swap “sell” to “sell or otherwise provide”.
Do they have contracts in place with every single entity they provide your personal data to, regardless of context, that they are not allowed to sell/exchange/give away said personal data to data brokers or insurance companies and that such an agreement must be made with any and every company that, in turn, acquires this data?
Oh! And lets not forget the ever-important derivative information.
Information derived from your personal information that Ford or any other car manufacturer collects that can still identify you should also be off the table for ever getting in the hands of data brokers or insurance companies under any context.