A recent investigation conducted by the consumer advocacy group Which? has exposed a troubling trend in the realm of smart devices. It has been discovered that everyday gadgets, ranging from air fryers to televisions, are gathering excessive amounts of user data without providing a clear explanation or transparency regarding its intended use.
The study conducted by Which? uncovered that certain smart devices, notably air fryers and smartwatches, are seeking permissions that surpass what is necessary for their basic functions. This excessive data collection has sparked significant privacy concerns among consumers and advocates alike.
One of the most alarming findings was in relation to air fryer models from brands like Xiaomi and Aigostar, which were found to request access to a user’s precise location and even permission to record audio. These permissions, which are not evidently tied to the device’s core functionality, have raised red flags regarding potential misuse of personal data.
The Xiaomi air fryer app, for instance, was found to connect to third-party trackers associated with prominent platforms like TikTok, Facebook, and Tencent, potentially transmitting user data to servers in China as outlined in the app’s privacy policy.
Smartwatches, another popular category of smart devices, also exhibited concerning levels of data collection. The Huawei Ultimate smartwatch, for instance, mandates nine “risky” permissions, including access to precise location, audio recording, and stored files, prompting worries about user privacy. While Huawei maintains that these permissions are essential for device functionality and assures users that data is not exploited for marketing purposes, the extent of data collection remains a subject of debate.
Furthermore, televisions have not evaded scrutiny, with models from Hisense and Samsung found to request location data from users. Samsung’s smart TV app even demanded eight high-level phone permissions, making it the second most data-hungry device after the Huawei smartwatch. Despite claims from Samsung and Hisense that location data is used to personalize user experiences, Which? discovered in its tests that providing a postcode seemed mandatory for setting up Samsung models.
The investigation extended to smart speakers as well, with the Bose Home Portable speaker identified as linking to various trackers, including Facebook, Google, and Urbanairship, a digital marketing firm. While smart speakers like Amazon’s Echo Pop and Google’s Nest Mini offer users some control over data-sharing requests, the overall privacy features were deemed limited by Which? as certain data requests cannot be fully opted out of by users.
In response to the concerning findings, Which? has urged companies to prioritize consumer privacy over profits, emphasizing the lack of transparency in many data requests. The advocacy group has called for stringent enforcement measures, especially with the forthcoming guidelines from the UK’s Information Commissioner’s Office (ICO) for smart product manufacturers in Spring 2025.
Various industry players, including Samsung, Hisense, Amazon, Google, Huawei, and Xiaomi, have responded to the investigation, highlighting their compliance with privacy regulations and efforts to provide users with data control. However, concerns remain regarding the invasive nature of certain data permissions requested by smart devices.
Expert opinions, such as that of Adam Brown, a managing security consultant at Black Duck, have underscored the importance of cybersecurity measures in connected products. Brown emphasized that while the Cyber Resilience Act sets stricter standards for digital features in EU products, it may not fully address the risks posed by excessive surveillance of smart devices.
In light of these revelations, Which? has advised consumers to be cautious by reviewing app permissions, limiting data sharing, and staying informed about privacy policies. By taking proactive steps to protect their privacy, consumers can navigate the increasingly connected world of smart devices with greater awareness and control.