Kohler's Smart Toilet Camera Faces Privacy Concerns After Engineer Exposes Encryption Claims

Kohler Smart Toilet Camera Promises Privacy, Delivers Something Else

Kohler is facing intense scrutiny after a former Federal Trade Commission technology advisor exposed misleading privacy claims about its new AI-powered toilet camera1

1

. The $599 Dekoda smart toilet attachment, launched in October by Kohler Health, uses optical sensors and machine-learning algorithms to analyze stool and urine for health insights1

1

. The device requires a subscription starting at $7 per month and promises "end-to-end encryption" for user data privacy1

1

.

Simon Fondrie-Teitler, a software engineer and former FTC advisor, began investigating after noticing the company's E2EE claims seemed inconsistent with what Kohler collected according to its privacy policy4

4

. His analysis revealed that Kohler can access and decrypt user data on its servers, fundamentally contradicting what end-to-end encryption means in consumer technology2

2

.

What End-to-End Encryption Actually Means

E2EE is most commonly associated with messaging apps like Signal and WhatsApp, where only the sender and recipient can decrypt messages1

1

. The service provider cannot access the content, which prevents third parties, including law enforcement, from reading private communications2

2

. This protection is what consumers expect when they see "end-to-end encryption" advertised.

However, emails exchanged between Fondrie-Teitler and Kohler's privacy team clarified that "the other 'end' that can decrypt the data is Kohler themselves"1

1

. The company confirmed that "user data is encrypted at rest, when it's stored on the user's mobile phone, toilet attachment, and on our systems. Data in transit is also encrypted end-to-end, as it travels between the user's devices and our systems, where it is decrypted and processed to provide our service"1

1

.

Kohler Defends Its Encryption Definition

Kohler Health issued a statement defending its use of the term, arguing that it applied E2EE "with respect to the encryption of data between our users (sender) and Kohler Health (recipient)"1

1

. The company acknowledged that it's not a messaging application and used the term differently than typical consumer applications4

4

.

What Kohler describes is actually Transport Layer Security or HTTPS encryption, which has been standard security practice for two decades3

3

. As IBM defines it, Transport Layer Security "encrypts data as it travels between a client and a server. However, it doesn't provide strong protection against access by intermediaries such as application servers or network providers"1

1

.

Privacy Concerns Mount Over User Data Access

The Dekoda's privacy policy reveals Kohler Health collects "health data, including fecal and urine images" along with sensor information about "gut health and blood in bowl"2

2

. More concerning, the policy states the company can use this data and share it with third parties to refine its platform, improve products, promote its business, and train AI and machine-learning algorithms3

3

.

Kohler Health confirmed to media outlets that if users consent through an optional, unchecked checkbox in the app, the company may de-identify the data and use it to train AI programs2

2

. The company emphasized that "privacy and security are foundational to Kohler Health because we know health data is deeply personal"2

2

.

Deceptive Marketing Practices Raise Red Flags

RJ Cross, director of the consumer privacy program at the Public Interest Research Group, told Ars Technica that "using terms like 'anonymized' and 'encrypted' gives an impression of a company taking privacy and security seriously -- but that doesn't mean it actually is"1

1

. The misleading privacy claims echo a similar case where Zoom faced Federal Trade Commission fines for falsely advertising E2EE capabilities4

4

.

Fondrie-Teitler explained his motivation for investigating: "I'd like the term 'end-to-end encryption' to not get watered down to just meaning 'uses https' so I wanted to see if I could confirm what it was actually doing and let people know"4

4

. He emphasized that maintaining clear definitions helps consumers make informed decisions about data privacy in an already complex landscape of smart home devices.

What This Means for Smart Home Device Users

The controversy highlights broader issues with how companies market privacy features in connected devices. Fondrie-Teitler noted that "it's already so hard for non-technical individuals (and even tech experts) to evaluate the privacy and security of the software and devices they're using"4

4

. When companies blur the meaning of established security terms, it becomes even harder for consumers to understand what protections they actually have.

The Dekoda's primary competitor, Throne, uses similarly vague language, claiming "bank-grade encryption" without specifying E2EE1

1

. This suggests the problem extends beyond Kohler to an emerging category of wellness-focused smart home devices that collect highly sensitive health data. As these products become more common, the need for clear, accurate privacy disclosures becomes increasingly critical for protecting user data privacy and maintaining trust in health insights technology.