Approximately one in ten smart home apps share user data with third-party advertising networks, and the biggest offender in this category are kitchen appliances.

Smart Homes

This data is based on Surfshark’s Smart Home Privacy Checker, who identifies the following brands that share data from kitchen devices with third parties:

  • Mi Home by Xiaomi (kettle, blender/food processor)
  • LG ThinQ (microwave, dishwasher, fridge)
  • Home Connect App (fridge, dishwasher)
  • De’Longhi (coffee maker)

The cybersecurity company further states that some apps go a step further, such as the Keurig Coffee Maker app, which collects tracks user data based on email address; and purchase, search, and browsing history.

It also adds that the Kenmore smart app (fridge) and Nuwave app (oven) collects data and tracks users’ precise location.

The Smart Home Privacy Checker assessed over 290 applications connected to over 400 Internet of Things (IoT) smart home devices, and selected apps corresponding to 64 device types highlighted for their popularity in online articles.

Surfshark also analysed data from the apps’ listings on the Apple App Store examining 32 potential data points across 12 categories.

According to Statista, the smart home market is expected to increase to 785.16 million users by 2028, up from 424.5 million users.

Goda Sukackaite, privacy counsel at Surfshark says that users must be made aware and given the means to reclaim their digital privacy in an era where convenience frequently takes precedence over privacy concerns.

“Our latest research has uncovered a troubling trend in smart home device apps, notably from tech giants like Amazon and Google,” says Sukackaite.

“It is important to understand that this issue extends beyond just data collection; it encroaches upon the intimate aspects of users’ lives, which, if mismanaged, could lead to data theft, security breaches, and the unsanctioned, uncontrolled dissemination of personal information to third parties.”

Amazon’s Alexa collects more data

The cybersecurity company cites a new study that says Amazon’s Alexa collects the most data – 28 out of 32 possible data points, which is three times the average for a smart home device.

“Moreover, all collected data is linked; each piece of data is associated with an individual user profile. This data includes precise location, contact information (email, phone number), and health-related data.”

It adds that the four data points Alexa does not collect can be inferred from other data. “For instance, while Alexa does not record browsing history, it does capture search history. It may not collect fitness data, but it does gather health data and other sensitive information correlated to it.”

How Google compares

In comparison, Google gathers slightly less data than Amazon – 22 out of 32 possible data points, which is still nearly three times the amount typically collected by other smart home devices, it says.

“Like Amazon, Google links all the collected data to the user. Some of the most notable data points collected include address, precise location, photos or videos, audio data, browsing, and search history.”

The company says: “The extensive collection of such data can be concerning because it may compromise user privacy and potentially be exploited for targeted advertising, surveillance, or even malicious purposes if it falls into the wrong hands.”

Sukackaite concludes: “To counteract this, individuals should actively seek out and utilise privacy settings, question and manage app permissions, and stay informed about the data security policies of the smart home devices they choose to integrate into their lives.”