Kohler’s Dekoda, a smart toilet camera that analyzes images to provide gut-health insights, was described on the company site as using “end-to-end encryption.” A security researcher reviewed the product documentation and privacy policy and concluded the phrasing was inaccurate: the company’s protections described TLS (encryption in transit) and encryption at rest on its systems, while Kohler retained the ability to access data on its servers and may (with user consent) use de-identified data to train models.
After the issue was raised, Kohler removed the “end-to-end encryption” claim and updated its wording. The product is sold with a subscription model and remains a reminder that precise privacy terminology matters in consumer IoT marketing.
Top comments (0)