Dyson runs a bug bounty program suggesting they take security seriously, but their purifiers communicate over an unencrypted protocol where the login credentials can be figured out from a sticker on the device. Anyone on your WiFi network can eavesdrop on your purifier's sensor data — your home's temperature, humidity, and air quality — without any hacking required. Despite this being publicly known, Dyson has not fixed it.
high
Dyson tells users that sensor data is only used to 'improve our technology.' But they actually aggregate environmental data from 2.5 million purifiers into a massive global research project, publish findings in press coverage, and use the results as marketing material. Using your home's air quality data for PR campaigns and market research goes well beyond 'improving technology.'
high
Dyson says they need your location to show air quality in your area. But the app requests permission to track your precise GPS location even when you are not using the app (background location). An air purifier sitting in your living room does not need to know where you go throughout the day. Background location tracking is one of the most invasive permissions on Android, and Dyson uses a minor feature (area air quality alerts) to justify always knowing where you are.
Dyson says the robot vacuum's camera never sends pictures of your home to them. But the camera creates a detailed map of your house — room sizes, furniture layout, everything — and THAT data IS sent to Dyson's servers through the app. Saying "we don't send the photos" while sending the map made from those photos is misleading.
high
Dyson says they never sell your data and are careful about what they collect. But their app contains Rakuten — a marketing tracker that shares your behaviour with advertising networks. Having an ad tracker in an app that controls your home robot vacuum doesn't match "deliberately lean with data."
high
Dyson says they collect your location to show air quality data — a feature for air purifiers. But if you use the same app for your robot vacuum, Dyson gets your GPS location AND a detailed map of every room in your house. A robot vacuum doesn't need to know your GPS coordinates to clean your floor.
Dyson's robot vacuum camera captured a woman sitting on a toilet, and that image ended up with third-party contractors labeling training data. Dyson's defense: "development units" — as if the camera becomes more respectful of privacy once it ships to consumers. The same camera hardware, the same AI pipeline, the same company. Development or production, someone's bathroom ended up in a stranger's dataset.
high
Dyson says it needs your data to make the vacuum work better. But your vacuum already knows how to suck. What Dyson is actually building is a minute-by-minute map of your domestic life — which rooms you clean, how often, what's on your floors, and when you're home. That's not product improvement. That's lifestyle surveillance sold as customer service.
medium
James Dyson spent years campaigning for Brexit, telling the British public they needed sovereignty from EU regulation. Then he moved Dyson's headquarters to Singapore, where data protection fines max out at about $740,000 — what Dyson makes in roughly 45 minutes. He wanted Britain free from EU rules, then freed himself from British ones. Your vacuum's data now lives under the legal regime he chose, not the one he sold you.
Your Dyson purifier knows the air quality in your bedroom. It knows when you turn it on at night and when it shuts off in the morning — your sleep schedule. It knows the temperature and humidity of every room. It knows when you're home and when you're not. It knows the pollution in your neighbourhood. Dyson collects all of this through the app and shares it with third-party analytics and advertising partners. You bought an air purifier. You got a home environment surveillance system that knows when you sleep, when you wake, and what you breathe.
high
A $550 hair dryer. A $650 air purifier. A $800 vacuum cleaner. Dyson charges five times what competitors charge because the engineering is premium. But the privacy policy is identical to a $30 Amazon fan — data shared with advertising partners, profiling for personalised ads, retained indefinitely. You pay the premium for the motor. The surveillance comes free. A company charging luxury prices with commodity data practices.
high
You can opt out of Dyson's data collection. You just lose the air quality monitoring, the scheduling, the filter alerts, and the remote control. A $650 purifier becomes a $650 fan. The features that justified the price require the data collection you didn't want. Dyson gives you a choice: share your home environment data, or own an expensive appliance with a blank screen. That isn't a choice. It's a hostage negotiation with a purifier.