Consumer-impact summary: mention physical power off, content organization
Line 11: Line 11:


==Consumer-impact summary==
==Consumer-impact summary==
To use the charger, users must enter login details for the charger hotspot. The charger hotspot seems to depend on a WiFi connection between the charger hotspot and your home network. The connection can be unstable or out of range. There does not seem to be support for using an Ethernet connection between the home router and the charger hotspot. The unstable or out or range connection prevents the configuration page for the hotspot from being accessible, and so unable to change the default hotspot password. The default password is very easily guessable.
To use the app for charging or using smart cards for charging, you must register an account using your phone number. The app requests permissions to access network, bluetooth, location servers and to send notifications. There is not an in-app way to erase your data and delete account, but there is a phone number and email address that can be used for exercising data privacy rights. Calls to their customer service are recorded, for training purposes.


After entering login details for connecting to the hotspot, a local IP address for the hotspot needs to be visited in your web browser, while connected to the home network. The page is only accessible if the "Not Secure Connection Warning" or any other similarly named browser setting for enforcing HTTPS is disabled.
The charger has a hostspot and requires connection to your home router over WiFi. The connection can be unstable or out of range. Ethernet would be a more reliable way for the charger and router to communicate with each other.


To use the app, "for your convenience" or for being able to use the smart cards, you must register an account using your phone number. The app requests permissions to access network, bluetooth, location servers and to send notifications. There is not an in-app way to erase your data and delete account, but there is a phone number and email address that can be used for exercising data privacy rights. Calls to their customer service are recorded, for "training purposes".
The default password for the hotspot is easily guessable. Changing the password is done via web browser. Any settings enforcing HTTPS must be disabled to access hotpot configuration.


When using the app with all requested permissions granted, the charger itself is not found, at least on iOS, but is found on Android. It is unclear if this is due to connection issues or the app being buggy. Due to the charger hotspot not being found, you cannot control when charging starts or stops, automatically or manually.
When using the app with all requested permissions granted and enabled, the charger itself sometimes cannot be found. It is unclear if this is due to connection issues or the app being buggy. Due to the charger hotspot not being found, you cannot control when charging starts or stops, automatically or manually.


It is possible to physically switch off the power to the charger within your home. This may be useful for mitigating the security risk of using the default, easily guessable, weak hotspot password while the charger is powered on.
It is possible to physically switch off the power to the charger within your home. This may be useful for mitigating the security risk of using the default, easily guessable, weak hotspot password while the charger is powered on.