Ostrzeżenie: *Prywatność dla tego produktu do nabycia osobno
Wyze makes this cheap fitness tracking watch designed to also control all the Wyze smart home stuff around your house like your Wyze Cam and Wyze Plug. It tracks all the usual, heart rate, steps, calories, and connects to your phone via Bluetooth to get alerts and share fitness data. The Wyze Watch is affordable but a cheap fitness tracker from a company with a checkered privacy and security past feels more than a little creepy? Wyze isn't great a privacy, and there are more private smart watch options out there (like Garmin and Apple Watch).
Co się może stać, jeśli coś pójdzie nie tak?
Oof, Wyze! What happened? You went from being a fairly OK, affordable smart home company to quite a questionable one in just a couple of years. Not good. In fact, we must warn you that some Wyze products -- particularly their security cams -- likely come with *Privacy Not Included.
Let's start with Wyze's last couple of very checkered years when it comes to security and protecting the sensitive personal information their security cams can collect through video and audio. First, in 2022, security researchers at publication Bitdefender "found three vulnerabilities that would have given attackers direct access to the cameras, including recordings stored on the SD card." Consumer Reporters followed with a report calling out Wyze for not fixing the security flaws in some Wyze Cams for three years and did not communicate with users promptly about this vulnerability.
That was in 2022, and then again in 2023, Wyze admitted to a security vulnerability that exposed the private video recordings from some of their user's cameras were exposed to people on the internet. The Verge reported that some Wyze users were able to see video of cameras not their own through the Wyze web portal. This resulted in the NY Times' Wirecutter to pull their recommendation of Wyze cams to their readers. USA Today also pulled their recommendation of Wyze security cameras. All this, on top of Wyze's massive data leak in 2019 that exposed the personal information of 2.4 million customers when they left a database unprotected for 22 days.
So, Wyze's security cameras have a pretty bad track record at security and privacy. That's not good. What about Wyze's privacy policy for their other smart devices? Is it any better? Not really. Wyze says they can collect a ton of information on you -- lots of personal information, usage information when you use their devices, tracking information, and they even say they can gather more information about your from third party sources. They say they can use all this information to do things like build inferences on you to target you with advertising. And, they say that they can share and even "sell" (under the California privacy law CCPA definition of sell) some of your personal information -- including personally identifying information and inferences about you -- to third party advertisers for targeted advertising purposes. Not very private at all.
Wyze also says they can share de-identified or aggregated information with third parties, which is pretty common and not always a concern. Although it’s a good time to remind you that it’s been found to be pretty easy to re-identify some types of de-identified data and track down an individual’s patterns, especially with location data.
On top of Wyze's bad track record and not-so-great data collecting and sharing policies, Wyze has a few more privacy gripes we'd like to pick. First, Wyze doesn't guarantee everyone the right to have all this data they collect you deleted. They also don' make any mention of how they handle children's data in their privacy policy, which is really bad form. Also, they straight up seem to make claims that aren't factual on the Data Safety page for the Wyze app in the Google Play Store, when they state that they don't share data with third parties (according to their privacy policy, they do) and that the app doesn't collect any user data (pretty sure it does). (Sidenote: The Google Play Store Data Safety pages have a whole host of problems we talk more about here.) Oh, one more thing we found that raised our eyebrows as we were looking into Wyze -- they Wyze app you use to control Wyze's smart home devices asks for permission to read your text messages (and control your flashlight). That seems a bit weird to us. We're not sure we want Wyze to read out text messages...or control our flashlight. None of these privacy no-nos makes us feel great about Wyze's privacy practices.
So, what's the worst that could happen? Well, the worst probably already has happened for those poor Wyze users whose cameras were exposed and open to strangers on the internet to spy inside their home without their knowledge. That is very bad. Unfortunately Wyze seems to have gone from an affordable smart home company without too many privacy and security issues, to one of the worst offenders on the market with recurring issues. Our recommendation is to beware that your Wyze smart devices could come with *privacy not included.
Wskazówki, jak się chronić
- Review Wyze's recommendations to keep your account secure
- Check Wyze security & trust tips
- Be very careful who you chose to share your Wyze wellness data with.
- Don't connect your Wyze app to any social networks like Facebook.
- Enable two-factor identification
- Do not sign up with third-party accounts. Better just log in with email and strong password.
- Chose a strong password! You may use a password control tool like 1Password, KeePass etc
- Use your device privacy controls to limit access to your personal information via app (do not give access to your camera, microphone, images, location unless neccessary)
- Keep your app regularly updated
- Limit ad tracking via your device (eg on iPhone go to Privacy -> Advertising -> Limit ad tracking) and biggest ad networks (for Google, go to Google account and turn off ad personalization)
- Request your data be deleted once you stop using the app. Simply deleting an app from your device usually does not erase your personal data.
- When starting a sign-up, do not agree to tracking of your data if possible.
Czy może mnie podsłuchiwać?
Aparat
Urządzenie: Nie
Aplikacja: Tak
Mikrofon
Urządzenie: Tak
Aplikacja: Tak
Śledzi położenie
Urządzenie: Tak
Aplikacja: Tak
Czego można użyć do rejestracji?
Tak
Telefon
Nie
Konto firmy trzeciej
Nie
Jakie dane zbiera ta firma?
Osobiste
"Name, email address, postal address, phone number, photographs (such as for your profile picture). social media profile information, demographic information, your birth year, height, weight, gender, and personal fitness goals (for Wyze fitness devices). Approximate and in some cases precise location Data about the device and network you use, such as your hardware model, operating system version, mobile network, IP address, unique device identifiers, browser type, and app version. Information about your activity on Wyze Services, such as access times, pages viewed, links clicked, and the page you visited before navigating to our websites."
Związane z ciałem
The Wyze Watch and Wyze Band have sensors that collect heart rate, speed and other distance and movement data, and the Wyze Scale sensors collect heart rate and weight measurements.
Społecznościowe
Jak ta firma wykorzystuje te dane?
Jak możesz kontrolować swoje dane?
Jaka jest znana historia tej firmy w zakresie ochrony danych użytkowników?
In 2023, Wyze admited to a security vulnerability that exposed the private video recordings from some of their user's cameras were exposed to people on the internet. The Verge reported that some Wyze users were able to see video of cameras not their own through the Wyze web portal. This resulted in the NY Times' Wirecutter to pull their recommendation of Wyze cams to their readers. USA Today also pulled their recommendation of Wyze security cameras.
In 2022, cybersecurity publication Bitdefender reported that their security researchers " found three vulnerabilities that would have given attackers direct access to the cameras, including recordings stored on the SD card." Consumer Reporters followed with a report calling out Wyze for not fixing the security flaws in some Wyze Cams for three years and did not communicate with users promptly about this vulnerability.
In 2019, a massive data leak happened at Wyze, exposing information from 2.4M customers.
Informacje o prywatności dziecka
Czy ten produkt może być używany bez połączenia z siecią?
Przyjazne dla użytkownika informacje o prywatności?
Wyze's Privacy Policy lacks a lot of information and can be confusing at times. There was also no mention of any child specific data privacy policies, which is not good.
Odnośniki do informacji o prywatności
Czy ten produkt spełnia nasze minimalne standardy bezpieczeństwa?
Szyfrowanie
Silne hasło
Aktualizacje zabezpieczeń
Zajmuje się problemami z bezpieczeństwem
You can submit security vulnerabilities to Wyze.
Zasady ochrony prywatności
Dowiedz się więcej
-
Wyze Didn't Completely Fix Flaws in Security Cameras for 3 YearsConsumer Reports
-
Wyze Cam v4 on the way. But you shouldn’t patronize this company.Zatz Not Funny!
-
Why We’re Pulling Our Recommendation of Wyze Security CamerasWirecutter
-
Wyze Cameras Just Had Another Big Security ProblemHow To Geek
-
Wyze security camera owners report seeing strangers' camera feedsMashable
-
Should you buy a Wyze camera? Our experts don’t recommend itReviewed
Komentarze
Masz uwagi? Podziel się nimi z nami.