2 ms·
> Did this company violate their own privacy policy? The original suit claims "Defendant never informed Plaintiff that it would monitor, collect, and transmit
by follower 10y ago
> Did this company violate their own privacy policy?
The original suit claims "Defendant never informed Plaintiff that it would monitor, collect, and transmit her Usage Information" and "Plaintiff never provided her consent to Defendant to monitor, collect, and transmit her Usage Information".
And the proposed settlement requires changes to disclosure statements.
> but didn't actually do anything beyond collect standard usage data.
Leaving aside the disclosure question, the product category itself raises the question of what do we consider "standard usage data" in this context? (We talk a bit about this aspect in our DEF CON presentation follow-up TEDx talk here: https://www.youtube.com/watch?v=WxRSjC1rPmA https://www.youtube.com/watch?v=WxRSjC1rPmA )
The app transmitted: time of use (ergo duration); internal device temperature; and, real-time pattern & intensity settings. It was also aware of geographic location of the people using the app. Why does the later matter? At a minimum because adult toys are illegal in some locations.
There's already examples of home automation units, car telemetry loggers and heart pacemakers being used in law enforcement investigations so it's not a stretch to imagine real-time sex toy data also being used.
I believe that developers and manufacturers have a responsibility to the people who choose to buy/use their software/devices to not just "collect all the data" particularly when their product is of an intimate & personal nature.