In the digitally connected world, the convenience and innovation offered by smart devices are undeniable, but they come with potential privacy risks that users often overlook. A recent report by the consumer rights group Which? has raised significant concerns about how smart air fryers and other smart devices, particularly those from Chinese brands, might be compromising user privacy. The investigation zeroed in on popular brands like Xiaomi, Cosori, and Aigostar, discovering troubling practices such as unnecessary data collection, demands for precise location data, and permissions to record audio on users’ phones. Furthermore, data from these devices were being shared with third-party ad networks, exposing users to potential data breaches and extensive surveillance.
The Extent of Data Demands
Xiaomi’s application demonstrated particularly concerning behavior, as it was found connecting to multiple ad trackers from Facebook, TikTok’s Pangle ad network, and Tencent, raising red flags about data sharing with third parties. In the case of Aigostar and Xiaomi devices, personal data was reportedly sent back to servers in China, creating potential vulnerabilities in user data protection. Alarming practices included Aigostar asking for personal details such as the owner’s gender and birthdate during the device setup process, which were deemed unnecessary for the functionality of a smart air fryer. This type of data demand highlights the broader issue of excessive data collection where companies request more information than what is required to deliver core functionalities.
Privacy experts and consumer advocacy groups stress that transparency is often lacking in how these devices collect, store, and share data. Without proper user consent, these practices are not only unethical but also put the users’ privacy in jeopardy. Cosori’s smart air fryer received one of the lowest privacy scores on the market, earning just 41% due to issues related to obtaining consent, protecting data security, monitoring user activity, and providing avenues for data deletion. These practices contribute to a growing concern about the long-term implications of using smart devices, as they tend to be replaced less frequently compared to devices like smartphones or laptops, leading to prolonged exposure to potential privacy risks.
Broader Implications and Industry Responses
Beyond smart air fryers, the Which? report also examined smart wearables like Huawei’s Ultimate smartwatch, which required nine risky phone permissions, such as access to precise location, audio recording, stored files, and visibility of other installed apps. Despite Huawei’s claims that no user data is used for marketing or advertising, the presence of active trackers on the device contradicts their assurances, pointing to potential inconsistencies in their privacy practices. This situation underscores the complexity and challenges consumers face while deciphering the true implications of permissions requested by smart devices.
Consumer protection groups and cybersecurity professionals are advocating for stronger regulations and more transparency in how smart devices operate and handle user data. Responding to the report, Xiaomi stated its commitment to following UK data protection laws and assured that it does not sell data to third parties. In contrast, Aigostar opted to remain silent, while Cosori asserted its compliance with General Data Protection Regulation (GDPR). Despite these assurances, the findings from Which? reveal a clear need for more stringent guidelines and robust enforcement from bodies such as the UK’s Information Commissioner’s Office (ICO).
Moving Forward and Protecting Consumer Privacy
In our digitally connected world, the convenience and innovation brought by smart devices are undeniable, though they come with potential privacy risks often ignored by users. A recent report by the consumer rights group Which? highlighted significant concerns about smart air fryers and other smart devices, especially those from Chinese brands, posing risks to user privacy. The investigation focused on popular brands like Xiaomi, Cosori, and Aigostar, revealing troubling practices including unnecessary data collection, demands for precise location data, and permissions to record audio on users’ phones. Additionally, data from these devices were being shared with third-party ad networks, putting users at risk for data breaches and extensive surveillance. This situation underscores the importance of being aware of these risks and taking steps to protect one’s privacy. It also raises questions about how regulations and standards might need to evolve to keep pace with these technological advancements, ensuring that innovation doesn’t come at the cost of personal privacy.