In the IoT era, sensitive and non-sensitive data are recorded and transmitted to multiple service providers and IoT platforms, aiming to improve the quality of our lives through the provision of high-quality services. However, in some cases these data may become available to interested third parties, who can analyse them with the intention to derive further knowledge and generate new insights about the users, that they can ultimately use for their own benefit. This predicament raises a crucial issue regarding the privacy of the users and their awareness on how their personal data are shared and potentially used. The immense increase in fitness trackers use has further increased the amount of user data generated, processed and possibly shared or sold to third parties, enabling the extraction of further insights about the users. In this work, we investigate if the analysis and exploitation of the data collected by fitness trackers can lead to the extraction of inferences about the owners routines, health status or other sensitive information. Based on the results, we utilise the PrivacyEnhAction privacy tool, a web application we implemented in a previous work through which the users can analyse data collected from their IoT devices, to educate the users about the possible risks and to enable them to set their user privacy preferences on their fitness trackers accordingly, contributing to the personalisation of the provided services, in respect of their personal data.

在物联网时代，敏感和非敏感数据被记录并传输到多个服务提供商和物联网平台，旨在通过提供高质量的服务来改善我们的生活质量。然而，在某些情况下，这些数据可能会提供给感兴趣的第三方，他们可以对这些数据进行分析，以获取更多的知识并产生关于用户的新见解，最终他们可以将其用于自己的利益。这种困境提出了一个关键问题，涉及用户的隐私以及他们对如何共享和可能使用其个人数据的认识。健身追踪器使用的大幅增加进一步增加了生成、处理并可能共享或出售给第三方的用户数据量，从而能够提取有关用户的更多见解。在这项工作中，我们调查对健身追踪器收集的数据的分析和利用是否会导致对所有者的日常生活、健康状况或其他敏感信息的推断。根据结果​​，我们利用 PrivacyEnhAction 隐私工具，这是我们在之前的工作中实现的一个 Web 应用程序，用户可以通过它分析从他们的物联网设备收集的数据，教育用户可能存在的风险，并使他们能够设置他们的用户相应地，他们的健身追踪器的隐私偏好，有助于提供的服务在他们的个人数据方面的个性化。