After all the speculation about “microwaves that turn into cameras”, the truth is that parents do need to be aware of the privacy and other safety issues of Internet-connected toys that are stuffed with more than just fluff. Last month, Motherboard reported that a company that sold internet-connected stuffed animals left more than 800,000 customer credentials and two million message recordings of children and parents on an exposed database. None of the data was protected behind a password or firewall. Additionally, a security researcher said anyone within range of a CloudPet could pair it with the Bluetooth connection, making it possible for anyone within distance to send and receive audio messages. That means strangers could connect to the toy and use it to communicate with your children.
While Internet connected toys are not necessarily bad, there are no regulations concerning privacy and security, so finding out what data a device collects and how it is being transmitted is something parents need to look up before setting a toy loose on the household. Before buying a smart toy, parents should research what data the device collects, how it is being stored, who has access to it, and if there is an option to opt out. This information usually isn't found on the box. That means a look at reviews, websites and news about the product is often necessary. Buyers might even want to contact the toy company directly or search their website for more details and updates.