Hardware

I just looked at their Privacy Policy/ToS.

EDIT: Accidentally hit post.

Anyway, based on their terms, the customer data is definitely the actual product. In addition, the wording makes it seem likely that the de-identification is pretty weak.

Further details that should give anyone pause.

Admitting to not respecting "Do Not Track" signals, because they are not legally required to:

Mention of collecting data about gender at birth, whether one regularly sleeps with a partner, and menstrual cycle regularity:

These guys are creepy as fuck, without even getting to the possible backdoor. They are selling customer data with a contractual pinky-swear to not re-identify the data (this being mentioned, to me, means that there is a plausible means to do so). So.

What kind of creepiness could this data be used for?

• Potential for blackmail/kompromat. (using sensors to detect patterns of sexual activity that could be infidelity or "sexual deviancy")

• Targeting people who may have had abortions.

• Signs of not following religious doctrine (premarital sex, sex for purpose other than procreation, etc)

• Checking whether the person is home and likely sleeping.

• Spying on employees during their off-work hours (not that it's ok during work hours) and/or scrutinizing sick leave.

There are a lot more possibilities. Way too dystopian and creepy.