Smart vacuum cleaner transmits home maps and can be remotely disabled
A computer engineer discovered that his iLife A11 smart vacuum was secretly transmitting 3D maps of his home to external servers and could be remotely disabled when he blocked its data transmission. The device contained open remote access software and mapping technology that collected and shared detailed interior layout information without user consent.
What happened
A computer programmer discovered that his iLife A11 smart vacuum cleaner was transmitting detailed data to servers worldwide without his consent. After monitoring network traffic, he found a constant stream of data including personal logs and telemetry data being sent to the manufacturer.
When the engineer blocked the data transmission, the vacuum stopped functioning after a few days. Service center technicians were unable to resolve the issue. Upon disassembling the device, he discovered Android Debug Bridge (ADB) software was open and accessible, allowing remote control without authorization.
The vacuum was also running Google Cartographer, an open-source program that creates 3D maps of interior spaces, with this mapping data transmitted back to the manufacturer. The engineer identified a line of code sent at the exact moment the device stopped functioning.
Reported impact
The owner's home interior layout was continuously mapped and transmitted to external servers without his knowledge or consent.
Index analysis
The iLife A11 contained both open remote access capabilities via ADB and automatic 3D mapping functionality, creating dual pathways for unauthorized data collection and control. The device's ability to be remotely disabled suggests potential for deliberate service disruption when data collection settings were modified.
Governance controls
No consent mechanism was provided to the user regarding data collection or transmission to external servers.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.