Tests by UK consumer organisation Which? found by detailed testing that ultra-cheap smartwatches and fitness trackers sold online had serious security flaws including excessive data collection, data not stored securely, no way to opt out of data collection, and no security lock function to lock out thieves or other unauthorised users. Typically a watch app might request permission to collect and store "personally identifiable information and personal property information", such as information on passport, transactions, bank balances, and ID cards; the app is unusable if permission is denied. The user cannot know if information is being stored securely, and it cannot be deleted. There is no control over whether the supplier views it or sells it on, for whatever purpose. In many cases data collected is not encrypted when transmitted to the supplier.
