Your secrets aren’t safe with this cute robot toy — they’re on Chinese servers ready to be hacked

The Eiliko, a new digital pet introduced by Energize Lab, has captured the attention of both children and parents alike with its charming design and interactive features. This little robot, resembling a soft marshmallow, is designed to engage users by changing its expressions based on the mood of the conversation. However, beneath its cute exterior lies a troubling reality: every interaction with the Eiliko is transmitted over Wi-Fi to servers located in China, where sensitive user data is stored. This raises significant privacy concerns, particularly regarding the security of personal conversations and the potential for unauthorized access by hackers.

Energize Lab, the company behind Eiliko, has not provided adequate assurances regarding the safety of the data collected by its device. During a demonstration, a user engaged in a casual conversation with the Eiliko, asking whether it would share secrets. The robot's response, "Your secrets are safe with me," starkly contrasts with the reality of data storage practices. This disconnect between user expectations and actual data handling practices has sparked outrage among privacy advocates and parents, who are increasingly wary of the implications of smart toys in their homes.

Key facts

The players

• Energize Lab: The manufacturer of Eiliko, responsible for its design and data handling practices.
• Consumers: Parents and children who purchase and interact with the Eiliko.
• Privacy Advocates: Individuals and organizations concerned about data security and user privacy.

The emergence of interactive toys like Eiliko is not an isolated phenomenon. Over the past few years, the market for smart toys has expanded significantly, with various companies introducing devices that utilize artificial intelligence to enhance user engagement. However, many of these products have faced scrutiny over their data collection practices. Previous instances, such as the controversy surrounding the My Friend Cayla doll, which was found to be vulnerable to hacking, have raised alarms about the security of children's data in the realm of smart toys.

What sets Eiliko apart is not just its charming appearance but also its reliance on cloud-based data storage. Unlike traditional toys, which do not collect user data, Eiliko's functionality hinges on its ability to process and respond to voice commands. This necessitates a constant connection to the internet, thereby exposing conversations to potential interception. The lack of transparency from Energize Lab regarding how user data is managed and protected is particularly concerning, especially given the growing number of cyberattacks targeting personal data.

How to read the numbers

What you can do with it

• Evaluate Alternatives: Consider other smart toys that prioritize user privacy and data security.
• Monitor Usage: Limit the amount of sensitive information shared with Eiliko during interactions.
• Stay Informed: Keep abreast of updates from Energize Lab regarding data protection measures.
• Advocate for Change: Support initiatives that promote stricter regulations on data privacy for smart toys.

What we're watching

As the conversation around data privacy in smart toys continues, we are closely monitoring any potential responses from Energize Lab regarding user concerns. Additionally, the broader implications of data security in the toy industry are likely to prompt regulatory scrutiny, which could lead to changes in how companies handle user data.

The Eiliko's launch serves as a stark reminder of the delicate balance between innovation and privacy. As technology continues to evolve, consumers must remain vigilant about the devices they invite into their homes, particularly those designed for children. The potential for data breaches and unauthorized access to personal information underscores the need for greater accountability from manufacturers in the smart toy market.