SmartThings

"information about your usage of the Service, including about how, when, and for how long you use the Service, your interactions and inputs in relation to the Service (including timezone and configurations), the devices that are connected to the Service, and other Samsung and third-party apps and services on your devices (such as list of apps on your devices, the websites you visit, and content and data, as well as responses about your interest and family members if you choose to use personalized services)."

Samsung collects an extraordinarily broad range of device data including installed app lists, websites visited, content and data from other apps, routines involving text message contacts, audio/video from connected devices, and refrigerator camera images — well beyond what a smart home hub requires.

"information related to your location through GPS, Bluetooth and WiFi signals, including with your permission, the precise geolocation of your device and connected devices (please note that if you do not allow the Service to collect your precise geolocation, you may not be able to use all of the features of the Service)."

Samsung tracks location via GPS, Bluetooth, and WiFi, and warns that refusing precise geolocation may disable features — creating pressure to consent to continuous location tracking.

"Subsidiaries and Affiliates: Samsung branded and non-branded subsidiaries and affiliates which we control or own; Business Partners: Third parties who we work together with. These business partners control and manage your personal information. For example, we may share your information with content or feature providers (e.g. when you install third-party plug-ins and they require sharing of data with the plug-in providers)."

Samsung shares personal information with a broad set of entities including non-Samsung-branded subsidiaries and third-party business partners who independently control the data, giving users little visibility into where their data ends up.

"Ad technology companies track users' online activities over time by collecting information through automated means, including through the use of cookies, web server logs, web beacons and other similar technologies. This information is used to show ads that may be tailored to individuals' interests, to track users' browsers or devices across multiple websites, and to build a profile of users' online browsing activities. This data collection takes place both on SmartThings.com and on third-party websites that participate in the online ad ecosystem."

Samsung enables tracking of users across multiple websites and devices to build advertising profiles, combining SmartThings usage data with browsing activity across the web.

"Your information will be kept for as long as it is needed to provide you with the Service, as required by law (government rules) or contracts (promises we made to other companies), or only for as long as necessary for one of the purposes above. Once it is no longer needed, we will either delete it or anonymize it."

Samsung provides no specific retention timelines, using open-ended language like 'as long as it is needed' which effectively allows indefinite retention of personal data.

"We may update this Privacy Notice from time to time and without prior notice to you to reflect changes in our personal information practices with respect to the Service or changes in applicable law. We will provide you with advanced notice of any material changes by notifying you through the Service or email if we have one."

Samsung reserves the right to change the privacy notice without prior notice for non-material changes, and only commits to advance notice for 'material' changes — a standard they define themselves.