Smart home devices are a privacy nightmare, Amazon Alexa, Google Home’s worst offenders, study finds – Firstpost

According to Statista, the smart home market has seen steady growth over the past decade, with the number of users worldwide expected to reach 785.16 million by 2028. While these devices provide convenience, they also raise serious privacy concerns. Are our homes still our private sanctuaries?

A recent study from research center Surfshark’s “Smart Home Privacy Checker” found that 1 in 10 smart home apps collect data for tracking purposes. The study found that apps from tech giants like Amazon and Google are the most data intensive because they are used by millions of people every day.

“In today’s world, where convenience often trumps privacy, our research reveals a disturbing trend in apps for smart home devices, especially for large companies like Amazon and Google. This issue goes beyond simple data collection; intrudes into users’ private lives, potentially leading to data theft, security breaches and the uncontrolled sharing of personal data,” said Goda Sukackaite, privacy advisor at Surfshark.

Sukackaite recommends users proactively manage their privacy settings, check app permissions, and stay up to date with data policies on their smart home devices.

The study analyzed 290 applications connected to over 400 Internet of Things (IoT) devices, focusing on the most popular ones. Surfshark examined 32 potential data points in each app, checking for user uniqueness, tracking and data association. The apps were ranked based on the amount and type of data collected.

Amazon and Google are the worst offenders
The study found that Amazon’s Alexa app collects 28 of 32 possible data points, which is more than three times the average for smart home devices. All collected data is linked to individual user profiles, including precise location, contact details and health data.

Google’s smart home devices collect 22 of 32 data points, also well above average. Notable data points include address, location, photos, videos, audio data, and browsing history.

This extensive data collection poses a risk to user privacy and can be used for targeted advertising or, if mishandled, for malicious purposes.

You pay twice, first with your wallet and then with your data
Users often pay for their smart devices twice: once with money and once with data. These applications may track users to display targeted advertisements or share information with third parties and data brokers.

About a third of the apps focus on collecting data such as device ID, email address and product interactions, and some even track precise locations. Examples include Canary-Smart Home Security and NuWave Connect.

Outdoor surveillance cameras are particularly data-hungry, collecting an average of 12 data points, which is 50 percent more than other devices. Apps like Deep Sentinel and Lorex contribute to the collection of large amounts of data.

“Consumers need to think about the personal data they are giving up before purchasing a smart device, especially when data is shared with third parties,” said Darius Belejevas, cybersecurity expert at Incogni. “Our research shows that one in ten smart home apps track user data, which can lead to loss of control over personal data, increased risk of security breaches and unwanted targeted advertising.”

Outdated privacy practices
The study also found that 12 of the 290 apps analyzed had not updated their data collection practices in more than a year, raising concerns about transparency and compliance with privacy regulations.

It is worth noting that apps like MekaMon and Cozmo that control children’s toys collect sensitive information such as exact location, photos and audio recordings.

As smart home devices become more integrated into our daily lives, users must remain vigilant about their privacy and the potential risks associated with these technologies.