> "their agreement for it's use specifically says that data is not sold to third parties, nor used in any purpose beyond specifically evaluating my driving"
Unlikely.
The master contract for your insurance company almost certainly allows for information that you provide for a variety of business purposes. Insurance companies pool risk data, and it seems unusual that any negative event would not be shared if captured via this mechanism. Another key thing is to look at the precise wording around "We do not sell your data". That is a weasel-wording that usually means "We will rent your data" or "We will provide your data at no cost to our business partners, for our business purposes".
Or, we won't sell/rent "your data" but we certainly sell/rent "our data" collected by the company and not specifically tied to individuals. (Insert long debate about anonymization and/or exactly how few people can be in a pool while still keeping it non-individualized.) It is amazing how many data links can be made with non-PII data points such as vehicle type, color, neighborhood, distance traveled, method of financing ect.
Unlikely.
The master contract for your insurance company almost certainly allows for information that you provide for a variety of business purposes. Insurance companies pool risk data, and it seems unusual that any negative event would not be shared if captured via this mechanism. Another key thing is to look at the precise wording around "We do not sell your data". That is a weasel-wording that usually means "We will rent your data" or "We will provide your data at no cost to our business partners, for our business purposes".