I'm not really sure I understand what location data has to do with right to repair? Do you mean because now some OnStar type API must be documented "for repair

I'm not really sure I understand what location data has to do with right to repair? Do you mean because now some OnStar type API must be documented "for repair"? (if so, I'd argue that security through obscurity is little to no security at all and I'd hope that your API is properly secured. For example just because the Google email API is documented doesn't mean people suddenly can read my email!)