Owners of smart home devices are being asked for swathes of personal data that is then potentially shared with social media firms such as TikTok, research has found.

The consumer champion Which? found companies appear to be gathering far more data than is needed for products to function. This includes smart TVs that ask for users’ viewing habits and a smart washing machine that requires people’s date of birth.

Rocio Concha, director of policy and advocacy at Which?, said: “Consumers have already paid for smart products, in some cases thousands of pounds, so it is excessive that they have to continue to ‘pay’ with their personal information.”

She said that firms should not collect more data than they need “to provide the service that’s on offer, particularly if they are going to bury this important information in lengthy terms and conditions.”

The consumer group analysed the data collection practices of popular brands behind a range of smart devices. Experts looked at what information they require to set up an account, what data permissions their apps request and what activity marketing companies are tracking on people’s products.

Every brand looked at required exact location data as well as an approximate one, despite this arguably not being necessary for the functionality of the product.

For smart cameras and doorbells, Which? found Ezviz devices, sold by major high-street retailers including Argos, had by far the most tracking firms active. This included TikTok’s business marketing unit, Pangle, Huawei, as well as Google and Meta.

Every single smart camera and doorbell brand Which? assessed used tracking services from Google, while Blink and Ring also connected to parent company Amazon. Google’s Nest product demands a user’s full name, email, date of birth and gender.

Amazon said it “never” sells customers’ personal data, and “never stop working to keep their [customer] information safe”. It said data was used responsibly to deliver products customers love.

Google said that it complies with “applicable privacy laws” and “provides transparency” to users regarding the data it collects.

Smart speakers are only supposed to listen when you want them to, but Which? found that Bose share user data with Meta, the parent company of Facebook. Bose declined to comment.

Experts found that companies were asking for the users’ date of birth – although this was optional on some machines.

Under the General Data Protection Regulations (known as GDPR), companies must be transparent about the data they collect and how it is processed. The data collected must also be relevant and limited to what is necessary for the processing to take place.

However, Which? argued that the reasons for taking information are often too broad for consumers to appreciate, with companies claiming “legitimate interests”. The consumer champion said that when consumers come to click accept, unless they closely analyse the fine print, they have little to no idea what will actually happen next with their data.


Sarah Marsh

The GuardianTramp

Related Content

Article image
How smart speakers stole the show from smartphones
Amazon and Google believe they’ve struck gold with their voice-controlled speakers while Apple and Microsoft struggle to catch up

Samuel Gibbs

06, Jan, 2018 @8:00 AM

Article image
EU agrees draft text of pan-European data privacy rules
New rules will strengthen European citizens’ privacy protections, while a controversial proposal to raise ‘age of digital consent’ to 16 was devolved to member states

Samuel Gibbs and agencies

16, Dec, 2015 @11:30 AM

Article image
Facebook and Google targeted as first GDPR complaints filed
Users have been forced into agreeing new terms of service, says EU consumer rights body

Alex Hern

25, May, 2018 @12:57 PM

Article image
At last, the data giants have been humbled | Carly Nyst
Everyone who uses the internet should rejoice at the passing of this legal milestone, which will hurt the likes of Facebook and Google

Carly Nyst

07, Oct, 2015 @6:00 AM

Article image
Customer data used for unwanted romantic contact, UK poll shows
Almost one in three people aged 18-34 have been messaged by staff after giving personal details to a business

Hibaq Farah

21, Aug, 2023 @11:01 PM

Article image
Alexa, say grace: C of E launches prayer skill for smart-home devices
Church of England’s Alexa skill offers prayers and answers questions such as ‘who is God?’

Harriet Sherwood Religion correspondent

24, May, 2018 @8:32 AM

Article image
Google Home smart speaker brings battle of living rooms to UK
Launch of rival to Amazon Echo takes fight to Jeff Bezos’s Seattle-based company, but experts say it’s still Google’s to lose

Alex Hern

28, Mar, 2017 @8:57 AM

Article image
Will you be getting a smart home spy for Christmas?
Facebook, Google and Amazon are eager to get their new devices under your tree. But will they give away your privacy?

Chris Stokel-Walker

10, Nov, 2018 @3:00 PM

Article image
Can I move my data to the EU before Google shifts it to the US?
Post-Brexit, Sean wants to keep his data protected by the EU’s GDPR rather than laxer US privacy laws

Jack Schofield

27, Feb, 2020 @9:15 AM

Article image
Amazon Echo, Google Home or Sonos One: which smart speaker should I buy?
Voice-control devices that can play music, answer questions and buy goods are one of the hottest gifts this Christmas. Here’s what they can do – and our pick of the best buys

Samuel Gibbs

01, Dec, 2017 @11:38 AM