‘End-to-end encrypted’ smart toilet camera is not actually end-to-end encrypted

Earlier this year, location goods shaper Kohler launched a astute camera called the Dekoda that attaches to your toilet bowl, takes pictures of it, and analyzes the images to counsel you connected your gut health. 

Anticipating privateness fears, Kohler said on its website that the Dekoda’s sensors lone spot down into the toilet, and claimed that each information is secured with “end-to-end encryption.”

The company’s usage of the look “end-to-end encryption” is, however, wrong, arsenic information researcher Simon Fondrie-Teitler pointed retired successful a blog post connected Tuesday. 

By speechmaking Kohler’s privacy policy, it’s wide that the institution is referring to the benignant of encryption that secures information arsenic it travels implicit the internet, known arsenic TLS encryption — the aforesaid that powers HTTPS websites. 

Using the close terms matters, particularly successful the discourse of users’ privateness concerns. Using the look end-to-end encryption — wide adopted by messaging apps specified arsenic iMessage, Signal, and WhatsApp — to picture TLS encryption is wrong, and tin perchance confuse users who spot that look and deliberation Kohler really cannot spot the pictures that the camera takes. 

A Kohler spokesperson did not respond to questions from TechCrunch, but a institution “privacy contact” told Fondrie-Teitler that idiosyncratic information is “encrypted astatine rest, erstwhile it’s stored connected the user’s mobile phone, toilet attachment, and connected our systems.” The institution besides said that, “data successful transit is besides encrypted end-to-end, arsenic it travels betwixt the user’s devices and our systems, wherever it is decrypted and processed to supply our service.”

The information researcher besides pointed retired that fixed Kohler tin entree customers’ information connected its servers, it’s imaginable Kohler is utilizing customers’ vessel pictures to bid AI. Citing different effect from the institution representative, the researcher was told that Kohler’s “algorithms are trained connected de-identified information only.”

The Dekoda costs $599 positive a mandatory subscription of astatine slightest $6.99 per month.