search

consumer-reports-innovation-lab / TheDigitalStandard

The Digital Standard is an ambitious, community-led effort to build a framework to test and rate products and services on the basis of privacy, security, and data practices.
Creative Commons Attribution 4.0 International
128 stars 46 forks source link

Be more specific about privacy by default #154

Closed alchenist closed 4 years ago

alchenist commented 4 years ago

Privacy (Is it private?) / Overreach - Collecting Too Much Data / Privacy by default

For procedures here, aside from looking at what's disclosed, it may be worth monitoring what kind of network traffic a product is generating.

For the indicator regarding user settings, maybe specify precisely that common things like telemetry or error reporting should be opt-in.

cody-f commented 4 years ago

Thanks for your procedure suggestion. In our current procedure, we capture all network traffic from all IoT devices in test. So, we know which endpoint the test device connected to by default.