Ecovacs Deebot vacuums accused of unauthorized data collection for AI training
Ecovacs is accused of using its Deebot robotic vacuums to secretly collect images, audio and video from users' homes to train AI models, with security vulnerabilities potentially allowing unauthorized access. Users reportedly receive only vague consent information, and data they believe deleted may be retained by the company.
What happened
Ecovacs Deebot robotic vacuums have been accused of secretly collecting personal data from users' homes, including images, audio and video recordings, to train artificial intelligence models.
According to researcher Dennis Giese, the devices contain security vulnerabilities that could allow unauthorized remote access. Ecovacs' privacy policy permits extensive data collection including 2D and 3D maps of homes, audio and video recordings, with data users believe they have deleted potentially retained and used by the company.
Reported impact
Users in Romania and other markets are reportedly exposed to privacy risks and intimate recordings potentially being captured in their homes without full informed consent, as the app provides only vague information about 'improving product functions and quality' without specifying what data will be collected.
Index analysis
The incident follows similar controversies involving other smart home device manufacturers. In 2022, iRobot vacuums were involved in a similar controversy when intimate photographs captured by the devices were shared on social media.
Governance controls
Ecovacs states that user participation in the data collection program is voluntary, though the specifics of what data is collected and how it is used remain unclear in the company's communications with users.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.