Whether it’s the air fryer or the video doorbell, many of us use multiple smart devices in our daily lives.
Smart TV PHOTO: Archive
The experts at Which? warned that four unexpected devices could be spying on you.
In their study, the team evaluated popular smart devices in six categories – consent, transparency, data security, data minimization, tracking devices and data deletion.
Based on these ratings, the researchers gave each product an overall privacy score, writes dailymail.co.uk.
Their findings show that several popular refrigerators can listen to your conversations and even send your personal data to China.
Meanwhile, more smart speakers are “filled” with trackers — including Facebook and Google.
“Our research shows how smart tech manufacturers and the firms they work with are currently able to collect data from consumers with seemingly reckless abandon, often with little or no transparency”, said Harry Rose, editor of Which?
Air cooler
Analysis of Which? showed that three products – Aigostar, Xiaomi Mi Smart and Cosori CAF-LI401S – knew the exact location of their customers and wanted permission to record audio on the user’s phone.
Xiaomi’s air fryer app connected to trackers from Facebook, Pangle (TikTok for Business’s advertising network) and Chinese tech giant Tencent (based on the user’s location), while the Aigostar air fryer wanted to know the user’s gender and date of birth when creating an account.
Meanwhile, both Aigostar and Xiaomi air dryers sent personal data to servers in China – although this was flagged in the privacy notice.
In response, a Xiaomi spokesperson said: “The permission to record audio on the Xiaomi Home app does not apply to the Xiaomi Smart Air Fryer that does not work directly through voice commands and video chat”.
A Kosori spokesman added: “We prioritize privacy and, subject to our internal compliance requirements, smart products must comply with the GDPR.”
Smart watches
In the smartwatch category, Which? tested the three most popular devices sold on Amazon – Huawei Ultimate, Kuzil and WeurGhy.
Huawei device was found to be requesting nine phone permissions “risky”, including your exact location, the ability to record audio, access to stored files, and the ability to see all other installed apps.
In response, the company stated that all these permissions had a justified need.
“Huawei takes consumer privacy incredibly seriously.” a spokesman said.
“Clearly, to be useful lifestyle and health/fitness partners, smartwatches require permissions to access a range of personal data; we are very clear both on devices upon installation and on the companion Huawei Health app, what permissions are required and why, and users have full control over enabling or disabling them at any time.”
Meanwhile, Kuzil and WeurGhy were found to be essentially the same product, which, according to Which?, is a common problem in retail markets where little-known brands sell almost identical products.
Both smartwatches needed consent to work, and if this was denied, they only functioned as basic watches.
Also, Which? did not find any of the legally required information about when smartwatches will be supported by security updates.
However, both watches did not appear to use any tracking devices.
Smart TVs
Analysis of Which? found that smart TV menus are “full” of advertisements and “thirsty” of user data.
The Hisense 40A4KTUK and Samsung EU43CU7100KXXU both asked for a postcode on setup, while the LG 43UR78006LK asked for a postcode, although it wasn’t required.
The Samsung TV app requested eight risky permissions for the phone, including the ability to see all other apps on the phone.
Hisense smart TV didn’t connect to any trackers that researchers Which? could detect it, but Samsung and LG connected to several of them, including Facebook and Google.
In response, Samsung stated: “At Samsung, the security and privacy of our customers’ data is of the utmost importance. And we use industry-standard safeguards and security practices to make sure your data is secure. Customers also have the option to view, download or delete any personal data through their Samsung accounts.”
Smart speakers
Which? tested Bose Portable Home Speaker, Amazon Echo Pop and Google Nest Mini (2nd generation).
The Bose speaker and app were found to receive the fewest initial phone permissions of the three devices tested, but were “stuffed” with tracking devices.
These included Facebook, Google and digital marketing firm Urbanairship.
The Bose speaker also scored poorly on how it obtained customer consent for data tracking.
Instead, Amazon Echo was found to offer useful options to skip various data sharing requests.
However, the Amazon and Google accounts required to use the Echo Pop and Nest Mini, respectively, do not offer users an easy option to opt out of tracking.
An Amazon spokesperson said: “We design our products to protect our customers’ privacy and security and put them in control of their experience.
For example, we build easy-to-use controls for our customers—these include physical buttons or shutters, simple in-app controls, and prompts within the device setup experience—and we’ve created resources that explain how our devices and services work and what options are available for customers”
A Google spokesperson added: “The privacy of our customers is very important to us, and Google fully complies with applicable privacy laws and provides transparency to our users about the data we collect and how we use it. For times when users want additional privacy controls on Google Nest smart speakers and displays, users can use Google Assistant in Guest mode. When in Guest mode, Google Assistant will not tell or show personal results, personal contacts, and automatically delete audio recordings and Google Assistant activity.”
How to improve your data privacy
Based on the findings, Which? offered some tips on how you can improve your data privacy:
Be careful what you share
Some of the data collection is optional during setup, which means you can opt out (although it may have consequences in terms of functionality). Share only what is convenient for you.
Check the permissions
On iOS and Android, you can review permission requests before downloading an app and check what each app has access to in your settings.
Deny access
Also in the phone settings, you can deny or limit access to data such as location, contacts and so on. Although, this might stop or limit certain aspects of the app.
Delete records
Using the Alexa and Google Assistant settings, you can set voice recordings to be automatically deleted rather than stored after a period of time.
Read the privacy notice
At least go through the policy, especially the sections on data collection. You have the right to object to the processing of your data by a company.
