Connected device manufacturers are not required to disclose privacy/security policies. It’s up to the consumer to know. Mozilla has a new buyer’s guide to help called *Privacy Not Included.