Chinese manufacturer Shenzhen Smart Care Technology Ltd. (SMA) said the SMA M2 smartwatch helps parents track their children using a companion app that tracks the smartwatch s GPS location and allows them to send messages or make phone calls. But researchers with AV-TEST in Germany said they discovered personal information of smartwatch users, including real-time GPS position data sent by the inserted SIM card, left unencrypted via a publicly accessible web API. Other personal data is also exposed as well, including names of both children and their parents, children’s addresses and their ages.
Source: https://threatpost.com/iot-smartwatch-childrens-personal-gps-data/150656/