Welcome to another edition of the Car Dealership Guy Podcast Recap—a rundown of key lessons from top operators, founders, and execs shaping the future of auto retail.
Today’s guests are Paul J Daly and Kyle Mountsier, Co-founders at More Than Cars.
Paul and Kyle break down exactly how a single exposed API key can hand a hacker access to an entire dealer management system, why dealerships are uniquely at risk given the volume of sensitive customer data they store, and what the best operators are doing to build securely before the first major breach hits the industry.
Marketing is the most overtalked about, under-resourced department in auto retail
Every conference, every LinkedIn feed, every vendor pitch is centered on marketing, and yet most dealer groups assign one person to manage all of it across 10, 13, or even 20 rooftops.
"It's the most overtalked about underresourced department in the entire operation."
— Kyle
The practical consequence: Dealers keep hiring more salespeople hoping to squeeze more out of a funnel they've never actually invested in building.
Dealers are funding Google and Facebook more than their own businesses
The industry's cost per acquisition is among the highest of any industry, and conversion rates are among the lowest, a combination that points directly at how the marketing budget is being managed.
"Our ads run the worst out of any industry, outside of law firms, in the world."
— Kyle
The root cause is that the capital is unstructured, and the people managing it are undertrained, under-resourced, and can't handle the volume being pushed through third-party platforms.
High acquisition cost is a symptom of underinvesting in retention and brand building
The instinct is to spend more at the bottom of the funnel when leads drop. The smarter play is to invest earlier in brand building and customer lifecycle, so fewer dollars have to compete for the same lead at the end.
"Cost of acquisition is only high because the investment in retention and brand building is extremely low."
— Paul
Bad creative only makes the problem worse because every platform penalizes irrelevant ads with higher costs, which means poor content is effectively a tax that dealers pay to Google and Facebook on every dollar they spend.
Start with who you are before you decide who your customer is
When a dealer enters a new market and tries to define their ideal customer profile, the instinct is to look outward at demographics, geography, and price sensitivity. The better starting point is internal.
"You have to start with who you are, like what's the persona of the operator, the owner, the vision of the operator, the owner and the people inside, right? Because an ideal customer profile typically comes from a vision or a resource that you have internally."
— Kyle
The cleanest example in the transcript is Marysville Toyota. That’s a dealership that's more than 50% female across all disciplines, not by design but by culture, and whose customer base is majority women as a result.
Presented by:
1. Uber for Business - Dealers, give your customers what they want: courtesy Uber rides. To learn how Uber for Business can help you drive customer loyalty, one ride at a time, visit @ here today to learn more.
2. Reynolds and Reynolds - Turn cars faster and increase profit with AutoVision, an end-to-end inventory management suite that optimizes every step of the used vehicle lifecycle. Visit @ here for more info.
3. CDG Dealer Platform - Dealer intelligence, all in one place. Give your dealership a competitive edge @ here.
A simpler website converts better, and every website vendor already knows this
The Carvana comparison is more about decision fatigue than anything, because it’s the same principle that makes a three-flavor ice cream shop easier to buy from than a 22-flavor one.
"You go on Carvana, you got any buttons on the search results page? Nope. How many buttons are on the VDP? Two."
— Paul
Every widget added to a dealer website by a vendor fighting for real estate makes the next widget less effective. Not to mention, the 30-day decision cycle that most dealerships run on makes it nearly impossible to test, learn, and commit to a cleaner approach.
One-price selling drove Sun Auto Group's leads down and conversion through the roof
The Todd Caputo story came up as one example. In that case, a Mazda group near Nashville dropped half its staff, switched to one-price selling, and watched floor traffic surge and marketing cost per car fall from around $500 to around $200.
"One of his GMs said this to me. He's like, 'I've never seen what happened on Saturday happen before because their leads actually went down, but their conversion went up. Floor traffic was through the roof.' He goes, 'I've never seen people just show up like this.'"
— Paul
Worth noting: The model isn't right for every market or every brand, but the underlying lesson is transferable… committing to a clear positioning and seeing it through produces results that keeping all options open never will.
Every dealership should be building a documented knowledge graph of its entire operation
AI tools (whether chat, phone, marketing automation, or CDP) can only communicate in a way that feels like your dealership if they actually know how your dealership works.
"My contention right now is that every single dealership should be building a very resilient documented knowledge graph of their entire dealership. That means standard operating procedures, job descriptions, role hierarchies across the entire pipeline of the dealership, and putting it in a database that's easily accessible."
— Kyle
Once that documentation exists, it can be wrapped in MCP endpoints and shared with every communication platform in the stack so every AI tool talks to customers the way the dealership actually operates, not the way some general model assumes it does.
Dealers vibe-coding their own tools are sitting on a major security risk they don't see yet
The excitement around building custom AI tools in-house is real, and the results are often genuinely useful. The risk sitting underneath it, though, is serious and largely invisible to the people building these things.
"I know dealers that are creating service accounts to log into their DMS or CRM so that they can go scrape the data and pull it into their vibe-coded thing. Well, if they don't understand how exposure leaks when unauthenticated users get at that system, all they have to go do is look at the browser and if they're doing that in an unauthenticated, in a client-side code, all of a sudden all of Reynolds is open."
— Kyle
His point: Because dealers hold more sensitive PII than almost any other small business (social security numbers, dates of birth, driver's licenses, signatures), a single exposed API key or unrotated password is all it takes to make all of it accessible.
The best rebrand for a dealership is as a hospitality business that happens to sell cars
Attracting better talent, building community trust, and differentiating from every other same-brand store in the market all point to the same opportunity, and none of it requires OEM approval.
"The best rebrand for a dealership is as a hospitality business which happens to sell cars as one of those revenue streams. That's the best rebrand in my opinion."
— Paul
The reframe changes the job description, the hiring pitch, the facility investment thesis, and the community footprint all at once.
The industry is about to swing hard back toward people
The fear that AI would replace the human element in dealerships is giving way to something more interesting: a recognition that the technology makes the human side of the business more valuable, not less.
"Because of the moment we're in technologically, for a split second it felt like we were going full robot and everyone was afraid and there's all this panic, and I think maybe maybe it's not clear to everybody yet… that we are going to flip so hard back to focusing on the human."
— Paul
Backing this, when Paul and Kyle ask people across the country what their favorite part of their last car-buying experience was, every single person named their salesperson, not the website, not the tech stack, and not the tools.
