It’s a Clean Sweep!
In the continuing battle of your privacy rights versus a company’s ability to collect and profit from data about you, there’s a new weapon on the field:
If you’re using a Roomba to keep your house clean, you may be inadvertently giving iRobot, the maker of the device, valuable information about your house and its possessions than you ever intended to.
The important fact to know is that some models of Roomba “map” the rooms they work in. This mapping allows the Roomba to “learn” the layout of your house, where furniture exists that is must navigate around, and so on. This permits the Roomba to clean more efficiently, and to keep track of changes. All in the interest of providing a more efficient service.
As it often does in such cases, the data collected by Roomba for this limited purpose may find its way to other uses, ones that may be more problematic.
A recent article in the New York Times makes the case that iRobot is reserving the right to use this mapping data for other purposes. While iRobot discounts the fears that such data re-use might raise, their wording causes concern.
“We have not formed any plans to sell data.”
No plans now, but who knows what the future brings?
In case you are tempted to think “what’s the problem here?”, consider this.
Jamie Lee Williams, a staff lawyer at the Electronic Frontier Foundation, a digital rights group, said information about the size of a home and the amount of furniture in it could allow advertisers to deduce the owner’s income level. Eventually, it might even be possible to identify the brands the owner uses.
“Especially combined with other data, this is going to be able to reveal a ton of information about what people’s lifestyles are like, what people’s daily patterns are like,” Ms. Williams said.
That’s far beyond what I, as a Roomba user, might imagine the otherwise relatively benign and uninteresting information about my house’s floor plan might reveal about me.
“But”, you say, “I don’t use and plan never to use such a device. Therefore, no problem!”
Well, let’s imagine that you bought your house from someone who had used a Roomba. Unless you plan to demolish and rebuild, the floor plan hasn’t changed since data on it was collected by the previous homeowner. Without restrictions on the use of such data–and knowledge by iRobot that the house no longer is in the possession of the person who may have originally given consent for such data collection–you’re exposed, perhaps without your knowledge.
Albert Gidari, director of privacy at the Stanford Center for Internet and Society, said that if iRobot did share the data, it would raise a variety of legal questions.
What happens if a Roomba user consents to the data collection and later sells his or her home — especially furnished — and now the buyers of the data have a map of a home that belongs to someone who didn’t consent, Mr. Gidari asked. How long is the data kept? If the house burns down, can the insurance company obtain the data and use it to identify possible causes? Can the police use it after a robbery?
As in any other cases, the ability of new technologies to collect data that can be mined for information about us may require careful reflection and judicious application of regulation to avoid unintended encroachments on our civil liberties.
For now, I’ll keep using a broom and my unconnected Dyson.
About Richard Fall
I am currently the National Solution Architect, Digital Platforms and IoT for Sogeti, working from the Des Moines, Iowa office. My interests lie in the areas of micro-services, SaaS, and IoT systems.
More on Richard Fall.