Internet of Things (IoT) has become one of the largest fields in Smart Home industry recently, and many consumers are purchasing these smart devices to use in their houses. There are many IoT devices on the market at the moment such as:

  • Smart thermostat
  • Smoke and leak detector
  • Smart wearable devices
  • Smart door lock and light bulb
  • Smart security camera and motion detector

Smart home devices sales are rising steeply because they are very creative products, health improvement, safety, and much more features. However, not many consumers are concerned about their privacy and security. Some people maybe awareness of this before purchasing the products. On the other hand, a lot of customers realize the issues after buying and using these smart devices.

For those who may not be concerned about privacy and security when they purchase the devices, the reason is that they do not know that all IoT devices will collect their data. The main purposes of collecting information from all the devices are to analyze and calculate the best solution to detect and prevent issues. Additionally, the smart devices need to communication with the user if something occurs; in order to connect with the owner far from home, most brands are using cloud to make it happen. Basically, your information needs to be transported via third party (Cloud provider), not many users have knowledge of this. Many consumers can hear about this issue on internet, news, friends, etc. and they can see the picture of privacy and security.

IoT collects data to analyse, it will learn user’s schedule going out and come back, security camera can detect and record activities, and if someone know this schedule, they can gain access into owner’s house when they are not home.

In IoT device container, consumer may find many papers about the product such as how to use, warranty term and condition, etc.; however, the manufacture seems to forget the information about how the collected data will be used, and after service end what will happen to the user’s information. Many customers buy the smart devices because of the quality, outlook, or the brand; but they miss an important factor which is their personal data. IoT products are very new to the market, and not everyone has knowledge about. The manufactures must be the one that provide the information to help their clients understand the basic structure and guide them through data collecting process. Print label or link to website to describe the policy can be used in the scenario.

IoT consumers have the right to know the product detail, and especially how their personal data will be collected. Not only privacy will be concerned but also security. If the adversary collects information from the IoT device provider, who will be responsible for this issue.