Warnung: *Datenschutz ist in diesem Produkt nicht inbegriffen
Amazon Smart Thermostat
Überprüft am: 9. November 2022
Amazon teamed up with Honeywell to create their smart thermostat. And you guessed it, Alexa controls almost everything once you pair it with another Alexa-controlled device in your home. There is no microphone or speaker built into the thermostat, so you'll need an Echo Dot or similar to use voice control. Once set up, Alexa takes over. It will adjust the temperature to suit your preferences. And it has Hunches! Yes, Hunches. Once you enable Thermostat Hunches, Alexa will have a hunch you're not home or a hunch you're asleep and adjust the thermostat accordingly. If Alexa has a hunch you're asleep and turns the thermostat down when you're really binge-watching Netflix for 8 hours, it's a good thing you can just say, "Hey Alexa, turn the heat back up!"
Was könnte passieren, wenn etwas schiefgeht?
Amazon proudly states they are not in the business of selling your personal information to others. True. But, Amazon doesn’t need to sell your data to others when they have their own advertising and retail juggernaut to use your data to sell you more stuff. Because Amazon is in the business of selling you more stuff. And it’s not just Amazon hoping to sell you stuff. Amazon has a whole program for others to sell you stuff on on their sites too. And those sellers get to use that data Amazon collects on you to target you with the stuff they want to sell. So, while Amazon might not be in the business of selling your personal information, they are in the business of selling access to your information to others to target ads to sell you more stuff.
And to do this, Amazon likes to collect an enormous amount of data on you. Things like: records of your shopping habits, Alexa search requests, the TV shows you watch and when you watch them, the music you stream, the podcasts you listen to, when you turn your lights on and off, when you lock your doors, identifiers such as your name, address, phone numbers, or IP address, your age, gender, your location, audio and visual information like those Alexa-requests or photos you take, the names and numbers of people listed in your contacts. The list goes on and on and on.
And what do they do with all that personal information they collect on you? Well, they use it to target you advertising, of course. Lots and lots of advertising. They do say they don’t use information that personally identifies you to display interest-based ads (of course, we have to trust them on this). They also use your personal information to identify your preferences and personalize products and services to keep you using those products and services as much as possible. And they say they can share that personal information with a number of third parties.
And when we say a number, we don’t exactly know how many third parties because Amazon doesn’t share that information. We must assume it’s a lot of third parties because they say they can share your data with everyone from all the companies they use to provide third party services. That means the companies that do things like help them with marketing, manage credit risk, analyze data, send mail and email, and more. Then there’s the third parties that offer services, products, apps, and Alexa skills through Amazon Services. And then there’s the business affiliates and other companies Amazon buys that could get access to your data too. Given that Amazon is a vast empire -- think Ring, Blink, Eero, Whole Foods, and beyond -- that’s potentially a lot of places your data could end up.
Let’s talk for a minute about Alexa itself. Amazon’s helpful artificial intelligence that’s built into everything from your Echo Dot smart speaker to your headphones to your thermostat comes with its own set of questions and concerns. Amazon does make it possible to automatically delete voice recordings immediately after they are processed. That's a nice feature after the controversy around human reviewers listening in to Alexa voice recordings. However, Amazon says when you delete your voice recordings, they still can keep data of the interactions those recordings triggered. So, if you buy a pregnancy test through Amazon Alexa, Amazon won't forget you bought that pregnancy test just because you ask them to delete the voice recording of that purchase. That record of the purchase is data they have on you going forward and may use to target you with ads for more stuff.
And then there are Alexa Skills, those little apps you use to interact with Alexa. These Skills can be developed by just about anyone with the, uhm, skill. And with too many of the Skills, third-party privacy policies are misleading, incomplete, or simply nonexistent, according to one recent study. When your data is processed by an Alexa Skill, deleting your voice recordings doesn’t delete the data the developer of that Skill collects on you. With over 100,000 Alexa Skills out there, many of them developed by third parties, now your data is floating around in places you might never have imagined.
Oh, let’s not forget Amazon’s track record at protecting and respecting their customers' data. That raises some red flags too. Here are a few of the problems we’ve seen over the last few years. There’s the Amazon employee who was caught stealing the personal information of over 100 million CapitolOne customers. And that’s not the only time Amazon employees with access to lots of customer data were caught leaking customers personal information. It’s happened quite a few times, actually. And then there’s the Alexa security bug that opened the door for hackers to potentially access users personal information and even their conversation history. These are some of the known privacy and security issues Amazon has had (there could be more unknown ones as well). And we get it, Amazon is a huge company with many products and employees and it’s impossible to secure everything's 100% of the time. But that’s the point. When you collect such a vast amount of personal information on people, you’ve got to be super, duper, extra careful to secure it everywhere, all the time. Amazon has shown they can’t always do that.
So, what’s the worst that could happen? Well, if you happen to order that pregnancy test through Alexa, Amazon now knows you might be pregnant. Then comes the ads for baby clothes, diapers, cribs, and more. And then tragedy strikes and you lose your pregnancy. To cope you buy wine from Whole Foods. Amazon could now assume you’re no longer pregnant. But they don’t know about this miscarriage, they just know that you were likely pregnant and now likely not. Setting aside the scary post-Roe vs Wade world we live in now where this information could be used by law enforcement, think of the targeted advertising you could get from companies trying to sell you more stuff to deal with your lost pregnancy, get pregnant again, or other ads you don’t need to see while trying to cope with this tragedy. Uhg. So yeah, while Amazon doesn't sell your personal information, they sure do use the heck out of it to target you with more stuff to buy. Is this creepy? Well, with so much data floating around in so many places, yeah, even Amazon’s Smart Thermometer controlled by Alexa can feel pretty creepy.
One more note on Amazon from a privacy researcher’s point of view. Trying to read through Amazon’s crazy network of privacy policies, privacy FAQs, privacy statements, privacy notices, and privacy documentation for their vast empire is a nightmare. There are so many documents that link to other documents that link back even more documents that understanding and making sense of Amazon’s actual privacy practices feels almost impossible. We wonder if this is by design, to confuse us all so we just give up? Or, if maybe even Amazon’s own employees possibly don’t know and understand the vast network of privacy policies and documentation they have living all over the place? Regardless, this privacy researcher would love to see Amazon do better when it comes to making their privacy policies accessible to the consumers they impact.
Tipps zu Ihrem Schutz
- If you use Alexa, delete your historical voice recordings from time to time, by saying “delete what I just said"
- When starting a sign-up, do not agree to tracking of your data.
- Do not sign up with third-party accounts. Better just log in with email and strong password.
- Chose a strong password! You may use a password control tool like 1Password, KeePass etc
- Use your device privacy controls to limit access to your personal information via app (do not give access to your camera, microphone, images, location unless neccessary)
- Keep your app regularly updated
- Limit ad tracking via your device (eg on iPhone go to Privacy -> Advertising -> Limit ad tracking) and biggest ad networks (for Google, go to Google account and turn off ad personalization)
- Request your data be deleted once you stop using the app. Simply deleting an app from your device usually does not erase your personal data.
Kann es mich ausspionieren?
Verfolgt den Standort
Was kann zur Registrierung verwendet werden?
Welche Daten sammelt das Unternehmen?
Name, email, phone number, address
Wie nutzt das Unternehmen die Daten?
Wie können Sie Ihre Daten kontrollieren?
Wie ist das Unternehmen in der Vergangenheit mit den Daten über seine Verbraucher umgegangen?
In 2022, Paige Thompson, a former Amazon employee accused of stealing the personal information of 100 million customers by breaching banking giant CapitalOne in 2019, was found guilty by a Seattle jury on charges of wire fraud and computer hacking.
In July 2021, the Luxembourg National Commission for Data Protection issued a 746 million euro fine to Amazon for allegedly violating the European Union’s General Data Protection Regulation (GDPR).
In August 2020, security researchers from Check Point pointed out a flaw in Amazon's Alexa smart home devices that could have allowed hackers access to personal information and conversation history. Amazon promptly fixed the bug.
In October 2020, Amazon fired an employee for leaking customer email addresses to an unnamed third party.
In October 2019, Forbes reported that Amazon employees were listening to Amazon Cloud Cam recording, to train its AI algorythm.
In April 2019, it was revealed that thousands of employees, many of whom are contract workers and some not even directly employed by Amazon, had access to both voice and text transcripts of Alexa interactions.
Informationen zum Datenschutz bei Kindern
Kann dieses Produkt offline genutzt werden?
Benutzerfreundliche Informationen zum Datenschutz?
Amazon has a complicated and difficult to navigate mess of privacy policies, privacy notices, privacy FAQs, and other privacy information.
Links zu Datenschutzinformationen
Erfüllt dieses Produkt unsere Mindestsicherheitsstandards?
Encryption in transit and at rest.
Password-protected Amazon account is needed to set up Alexa.
Umgang mit Schwachstellen
Amazon has a bug bounty program.
Alexa provides some information about its AI at the Alexa FAQ and the Amazon Science webpages.: https://www.amazon.com/gp/help/customer/display.html?nodeId=201602230 https://www.amazon.science/tag/alexa
Ist diese KI nicht vertrauenswürdig?
Welche Entscheidungen trifft die KI über Sie oder für Sie?
The Alexa AI runs the Amazon Smart Thermostat, and customers can enable "Hunches" so that the thermostat will go up, down, off, or on, based on when Alexa thinks what you need.
Gibt das Unternehmen transparent an, wie die KI funktioniert?
Hat der Benutzer die Kontrolle über die KI-Funktionen?
Tauchen Sie tiefer ein
Amazon Alexa Voice Data Tracking Might Lead To Privacy Issues; How To Prevent It?Tech Times
I Want You Back: Getting My Personal Data From Amazon Was Weeks of Confusion and TediumThe Intercept
Tour Amazon’s dream home, where every appliance is also a spyThe Washington Post
Here’s How Amazon Tracks You in 2022 (and how to stop them)All Things Secured
Amazon demonstrates Alexa mimicking the voice of a deceased relativeCNBC
Does Amazon Sell Your Personal Information?DeleteMe
Amazon Data Breaches: Full Timeline Through 2022Firewall Times
Column: Do you really want Amazon’s new drugstore knowing your medical condition?Los Angeles Times
Alexa records you more often than you thinkVox
Security Researchers Probed 90,194 Amazon Alexa Skills—The Results Were ShockingForbes
'Alexa, are you invading my privacy?' – the dark side of our voice assistantsThe Guardian
Study Reveals Extent of Privacy Vulnerabilities With Amazon’s AlexaNC State University
‘Millions of people’s data is at risk’ — Amazon insiders sound alarm over securityPolitico
Alexa Skills are easy to exploit in a number of worrying waysInput Magazine
Möchten Sie einen Kommentar loswerden? Schreiben Sie uns.