OECD AI Incident Monitor (2025-10-24) documents that the LED recording indicator can be physically disabled or covered, enabling fully covert recording. Modified glasses have been sold and used for secret filming. A man in San Francisco used modified glasses to covertly record women at the University of San Francisco. The EFF analysis (2026-03) confirms the LED can be physically disabled. The "hardwired" safety feature provides no meaningful protection against deliberate misuse.

Class action lawsuit (Lomeli v. Whoop Inc., August 2025) alleges WHOOP embedded Twilio's Segment tracker in its app, sharing sensitive health data (full names, email addresses, heart rate data, blood oxygen levels, sleep patterns, stress levels, video viewing history) with third parties. While WHOOP draws a legal distinction between 'selling' and 'sharing' data, the Segment integration transmitted identifiable health data to a third-party data infrastructure company without meaningful user consent.

Fitbit users forced to migrate to Google accounts by May 2026. Health data under Google's unified policy. The separation is now a checkbox, not a structural barrier. Enforcement relies on Google self-certifying compliance.

Meta acquired Limitless in December 2025. Immediate consequences: HIPAA protections were dropped — healthcare professionals who used Limitless to record patient consultations lost their compliance guarantee overnight. The minimum age was dropped from 18 to 13, meaning children could now use a device that records conversations. Users in the EU, UK, China, and Brazil lost access entirely — Meta's data practices don't comply with those jurisdictions' privacy laws, so rather than comply, Meta cut off the users. Meta stopped selling the pendant; existing devices are on a path to obsolescence by late 2026.

The Friend pendant contains an always-on microphone that records conversations and processes them through Google Gemini 2.5 in the cloud. The privacy policy grants permission to use conversation data for AI training and to collect biometric, facial, and voice data. Terms require users to waive jury trials and class actions. No independent security audit has been published. A $1 million NYC subway advertising campaign was vandalised with anti-surveillance slogans. A WIRED reporter wearing the device at a tech event reported hostility from other attendees. You pay $129 to wear a microphone that sends your conversations to Google for AI processing.

Vision Pro tracks your eyes 60 times per second. Apple says this data stays on-device and apps only receive "where you looked" after a tap gesture — not continuous gaze data. However, researchers from the University of Florida, Texas A&M, and NYU demonstrated GAZEploit (CVE-2024-40865): by analysing the Persona avatar's eye movements during a FaceTime call, they could reconstruct what the user typed on the virtual keyboard with up to 92% accuracy for passwords and 77% for messages. Eye tracking reveals not just what you looked at, but what you typed, what you read, what you lingered on, and what you avoided. Apple patched the specific vulnerability but the fundamental problem — that eye tracking encodes intent — cannot be patched.

The Peloton Tread+ was recalled in May 2021 after a child died and 72 other incidents were reported involving children and pets being pulled under the rear of the treadmill. The CPSC urged consumers to stop using the Tread+ immediately. Peloton initially fought the recall, calling the CPSC's warning "inaccurate and misleading" and insisting the product was safe. CEO John Foley apologised only after the recall became unavoidable. A company that argued with a safety regulator while children were being injured.

Bee AI is a wrist-worn device that continuously records and transcribes conversations. Amazon acquired the company in July 2025. The device records everyone in earshot — not just the wearer. In 11 US states that require all-party consent for recording (California, Florida, Illinois, Connecticut, Maryland, Massachusetts, Michigan, Montana, New Hampshire, Pennsylvania, Washington), wearing Bee without informing others is potentially illegal. Post-acquisition, Bee claims no audio is stored and Amazon doesn't access transcripts. They added "no-record zones." But a $49.99 always-on recorder owned by the company that runs Alexa, Ring doorbells, and the world's largest cloud infrastructure creates obvious data convergence concerns.