Listen to this article Vibrator Maker Fined C$4m For Monitoring Users’ Sexual Activity
Introduction
The Canadian sex toy manufacturer We-Vibe has received an order to pay customers up to C$10,000 each for shipping a “smart vibrator” that surreptitiously tracked owners’ use. We-Vibe’s parent company, Standard Innovation, settled a class-action lawsuit in an Illinois federal court, agreeing to compensate owners up to C$4m in total. Customers who used the associated app have the right to claim the full amount, whereas those who only purchased the vibrator are eligible for a refund of up to $199.
We-Vibe 4 Plus Vibrator Fined C$4m for Tracking Users’ Sexual Activity
We-Vibe 4 Plus is a bluetooth-connected vibrator that We-Vibe markets as a way for couples to stay connected. The device has a price tag of £90, and couples can control it through an app, allowing them to interact remotely. The controls in the app can be activated from anywhere, which makes it a popular choice for long-distance relationships. However, the security of the app that controls the vibrator is inadequate, and anyone within bluetooth range can seize control of the device.
We-Vibe 4 Plus Vibrator’s Data Collection Leads to C$4m Fine
The We-Vibe 4 Plus also collects data and sends it back to Standard Innovation, the parent company. This data includes information about the temperature of the device and the vibration intensity, which, when combined, reveal intimate details about the user’s sexual habits. This data collection is what led to the class-action lawsuit against Standard Innovation. We-Vibe customers expressed outrage at the fact that the company collected such sensitive data without their knowledge or consent.
Privacy and Security Vulnerabilities
The We-Vibe 4 Plus also had a number of security and privacy vulnerabilities that made many users uncomfortable. For instance, the app that controls the vibrator had insufficient security, enabling anyone within bluetooth range to take control of the device. This meant that strangers could take control of the vibrator and potentially use it to sexually assault the user. New Zealand-based hackers “goldfisk” and “follower” highlighted this issue at the Def Con hacking conference in Las Vegas in 2016.
Settlement and Statement from Standard Innovation
In practice, most We-Vibe owners are likely to receive less than the full C$10,000 they are entitled to due to various legal fees. However, Standard Innovation has agreed to pay a total of C$4m to compensate customers for the data collection controversy. In a statement to the press, the company said: “At Standard Innovation, we take customer privacy and data security seriously. We have enhanced our privacy notice, increased app security, provided customers with more choice in the data they share, and we continue to work with leading privacy and security experts to enhance the app. With this settlement, Standard Innovation can continue to focus on making new, innovative products for our customers.”
Conclusion
The We-Vibe case highlights the growing concern around data privacy and the Internet of Things (IoT). With more and more everyday objects being connected to the internet, there is a real risk that sensitive personal data could be collected without our knowledge or consent. The We-Vibe case is a reminder that companies have a responsibility to protect their customers’ privacy and data security, especially when it comes to such sensitive information. It also serves as a warning to consumers to be careful when using connected devices and to always read the privacy policy and terms of use before agreeing to them.
