Get any smart toys or smart home devices as gifts? Here's what you need to know about your privacy

Posted at 9:20 AM, Dec 29, 2018

BALTIMORE — These are not your parent's toys. Nowadays, dolls talk and teddy bears start conversations.

Smart toys have soared in popularity. They come with microphones, cameras and can store conversations. And once connected to the internet, that information becomes a target for hackers or many generate money for businesses.

“This toy may share user information with advertisers or even sell information to third-parties,” said Kyanna Cadwallader with the Maryland Public Interest Research Groups Foundation.

At this year’s “Trouble in Toyland” news conference, the consumer watchdog group warned parents about privacy invasive toys, including Dash the Robot, a kid-friendly robot that connects to apps via Bluetooth helps kids learn to code. The Mozilla Foundation didn’t find that the app is more susceptible to hacking than other apps, but did say a hacker could potentially access the microphone and listen in.

Cybersecurity experts have also found that smart toys, in particular, are vulnerable to cyberattacks. Unlike smart home devices, phones and computers, these toys lack sophisticated security mechanisms.

Last year, the FBI issued a warning to parents on the potential risks and how smart toys can create opportunities for child identity fraud.

“The microphone, the GPS data, digital data entered directly into some of these internet devices infringe on the privacy rights, violate consumer protection laws and pose serious threats to the safety of our young kids,” said Maryland Attorney General Brian Frosh.

Federal law requires companies to get parental permission before collecting and sharing data of children under 13.

If you decide to purchase one of these toys for your children, make sure to:

  • Read the privacy policy closely
  • Only connect toys to a trusted and secured Wi-Fi network
  • Change the manufacturer’s password
  • Avoid providing specific information on your child including details like pet’s names and birth date
  • Turn the toy off when not in use
  • “What kind of information does this toy collect on your child? And who does it share that information with? Can you turn off these settings and what settings can you not turn off? And how does the information that the toy is collecting on your child, how could that information put your child at risk?,” asked Cadwallader.

Instead of smart toys, adults received smart home devices. Amazon Alexa allows you to modify privacy settings in the app. If you go to settings and then Alexa Privacy, you'll be able to see and hear every time Alexa recorded you. According to Amazon , Echo devices are designed to record only after they’ve been alerted with a wake word like “Alexa.”

You can also delete any recordings stored or sent to the cloud. The company wants to warn users that deleting these recordings “may degrade your Alexa experience.”

The Mozilla Foundation ranked internet-connected devices based on their level of "creepiness." Click here to see what products have the ability to spy on you and whether or not you can control it.