“Sleeptrackers could be useful tools—if their accuracy can be proven—but they come with a host of medical privacy implications,” Marco Bellin, the CEO of the cybersecurity firm Datacappy, told Lifewire in an email interview. “HIPPA regulations exist to preserve the privacy of your medical records, but they don’t apply to the data Big Tech gleans from its devices monitoring your breathing, heart rate, and sleep patterns. There are no assurances that Big Tech will use that data to your benefit.”

Rise and Shine

The Halo Rise tracks your sleep using contactless, low-energy sensors and machine learning to monitor respiration and movement patterns. Once you wake, you receive a sleep summary, including a graph showing time spent in each sleep phase, including REM and deep sleep, along with a sleep score and information about your sleep environment. “Sleep tracking devices are no different than other wearables like fitness trackers. They track personal details such as REM sleep, oxygen levels, heart rate, and breathing patterns,” Thaine added. “And because they are connected to the internet, malicious actors who hack into the tracker will have access to this information. Worse yet, they may be able to use the tracker to record what people are saying or doing in their bedrooms through the app.” Gordh noted that users could put Halo Rise into standby mode by pressing the small button on top of the device for about four seconds until the clock shows “LoPR”, which turns off the ability to detect a user’s presence and track sleep.  Gordh said Halo Rise is built with multiple layers of privacy and security features. Users create or choose a unique profile and create a password when they first use a Halo product. Halo Rise is designed to sense when a person is in bed, but not who that person is, Gordh said. The sleep algorithms are trained to analyze the breathing patterns of the person closest to the device and within its limited range and discard the breathing patterns from anyone further from the device. “Halo Rise does not have a camera and cannot “see” anything,” he added. “Even when connected with your compatible Alexa-enabled device, no sounds or images of your body are ever captured by Halo Rise. Customers can always check the Halo app and see that Halo Rise has recorded a sleep session.”

Keeping Your Sleep Data Safe

If you buy the Halo Rise or another sleep tracker, there are things you can do to keep your information private. Matt Payne, the CEO of Width.ai, a machine learning consulting firm, said in an email that you should read the terms of service before signing up for an account with a sleep-tracking app or device.  “Many companies outline how they use user data in these agreements, so it’s important to understand exactly what you’re agreeing to when signing up,” he added. “Make sure you understand the device’s data collection and storage policies.”  Payne said that many vendors collect personal information like heart rate and sleeping patterns without informing their customers or seeking permission. Before purchasing a sleep tracker, research the vendor’s data policy thoroughly so that you know precisely how your data will be used and stored. Also, ensure that two-factor authentication is enabled on your account to add another layer of security against potential breaches or hackers accessing your data without permission.  “Finally, review the security settings on your device to ensure that it is configured correctly for maximum protection of your information,” Payne said. “Take advantage of any privacy settings available in the app or device itself.”