The underlying issue is who's data is this? Is it the manufacturers because the device gathered it or is it the users because it describes the user? Currently

The underlying issue is who's data is this? Is it the manufacturers because the device gathered it or is it the users because it describes the user? Currently, from what I have seen, it's usually argued to be the former and not the latter. For there to be saner balance, users have to a say about how this data is used and owned. The "reasonable expectation to privacy" doctrine needs to evolve to match modern age.