Kohler’s Smart Toilet Camera Not Truly End-to-End Encrypted
On Tue, Oct 1, 2023, Kohler introduced the Dekota toilet camera, a health-monitoring device priced at $600, which has come under scrutiny for its privacy claims.
On Tue, Oct 1, 2023, Kohler introduced the Dekota toilet camera, a health-monitoring device priced at $600, which has come under scrutiny for its privacy claims.
The Dekota camera is designed to monitor gut health, hydration levels, and other wellness metrics through analysis of bowel contents. Despite assurances of data protection, recent investigations reveal discrepancies in the company's privacy claims.
Kohler has highlighted "end-to-end encryption" on its website and marketing materials for both the Dekota device and its accompanying app. This encryption is emphasized as a key privacy safeguard across various company resources.
Confidential communications with Kohler's privacy team reveal a disconnect between the company's marketing language and the actual technical implementation. The critical issue is that Kohler retains access to all data collected by users' devices.
The Dekota camera is designed to monitor gut health, hydration levels, and other wellness metrics through analysis of bowel contents.
While the company claims that data in transit is encrypted "end-to-end," it is actually decrypted and processed by Kohler's systems, contradicting the traditional concept of end-to-end encryption (E2EE). In this case, E2EE typically means user-to-user communication encryption, which is not applicable here.
Instead, the encryption applied is standard HTTPS between app and server, combined with encryption-at-rest practices. This does not prevent Kohler from accessing data on their servers.
With access to decrypted data, Kohler indicates that user information is utilized beyond service delivery. The company states that algorithms are trained on de-identified data, and users consent to this use by accepting the app's terms. The data may be used for research, product improvement, and training AI and machine learning models.
The privacy policy specifies the creation of aggregated, de-identified data, which may be shared with third parties for business purposes, including platform analysis and promotion.
Although data de-identification offers some level of protection, the mischaracterization of security practices is a significant concern. Consumers expecting end-to-end encryption receive a different privacy model, which is crucial given the sensitivity of health data. Kohler's security practices, while standard for cloud applications, offer less protection than the marketed claims suggest.
Based on reporting by GBHackers.