full rewrite from stub. fixed wrong release year (was 2025, actually 2023) & wrong product type (not an action camera). added sources for forced activation, mimo app data collection, binding arbitration clause. removed unsourced advocacy paragraph.
keith review fixes: tightened lede to match 5-skip mechanism, dropped hacker news citation, fixed river loop date, corrected claim-source alignment
Line 7: Line 7:
|Category = Cameras
|Category = Cameras
|Website = https://www.dji.com/global/osmo-pocket-3
|Website = https://www.dji.com/global/osmo-pocket-3
|Description = 3-axis gimbal camera that won't function without mandatory app activation, forcing users to accept binding arbitration & surrender personal data
|Description = 3-axis gimbal camera that locks after five uses without mandatory app activation, requiring users to accept binding arbitration & a class action waiver
}}
}}


The '''DJI Osmo Pocket 3''' is a 3-axis gimbal camera released in October 2023 that can't be used until the owner installs the [[Forced app download|DJI Mimo smartphone app]] & completes a mandatory [[Activation|activation]] process.<ref name="dji-beginners-guide">{{Cite web |title=A Beginner's Guide to Osmo Pocket 3 |url=https://support.dji.com/help/content?customId=en-us03400009024&spaceId=34&re=US&lang=en |access-date=2026-03-29 |website=DJI Support}}</ref><ref name="dji-specs">{{Cite web |title=Osmo Pocket 3 - Specs |url=https://www.dji.com/osmo-pocket-3/specs |access-date=2026-03-29 |website=DJI}}</ref> That activation forces acceptance of [[DJI]]'s terms of use, which include binding arbitration & a class action waiver.<ref name="dji-terms">{{Cite web |date=2025-12-22 |title=DJI Products Terms of Use |url=https://www.dji.com/terms |access-date=2026-03-29 |website=DJI}}</ref> The Mimo app collects location data, device identifiers, & user content;<ref name="dji-mimo-appstore">{{Cite web |title=DJI Mimo on the App Store |url=https://apps.apple.com/us/app/dji-mimo/id1431720653 |access-date=2026-03-29 |website=Apple App Store}}</ref> on Android, the app isn't available through Google Play & users must sideload an APK directly from DJI's website.<ref name="dji-sideload">{{Cite web |title=Failure to Download and Install the App |url=https://support.dji.com/help/content?customId=en-us03400006802&spaceId=34&re=US&lang=en |access-date=2026-03-29 |website=DJI Support}}</ref>
The '''DJI Osmo Pocket 3''' is a 3-axis gimbal camera released in 2023 that locks after five uses unless the owner installs the [[Forced app download|DJI Mimo smartphone app]] & completes a mandatory [[Activation|activation]] process.<ref name="dji-beginners-guide">{{Cite web |title=A Beginner's Guide to Osmo Pocket 3 |url=https://support.dji.com/help/content?customId=en-us03400009024&spaceId=34&re=US&lang=en |access-date=2026-03-29 |website=DJI Support}}</ref><ref name="dji-specs">{{Cite web |title=Osmo Pocket 3 - Specs |url=https://www.dji.com/osmo-pocket-3/specs |access-date=2026-03-29 |website=DJI}}</ref><ref name="amateur-photographer">{{Cite web |last=Mold |first=Dan |date=2025-07-06 |title=The DJI Osmo Pocket 3 may be the world's favourite vlogging camera, but for me it has one HUGE drawback |url=https://amateurphotographer.com/latest/opinion/the-dji-osmo-pocket-3-may-be-the-worlds-favourite-vlogging-camera-but-for-me-it-has-one-huge-drawback/ |access-date=2026-03-29 |website=Amateur Photographer}}</ref> That activation forces acceptance of [[DJI]]'s terms of use, which include binding arbitration & a class action waiver.<ref name="dji-terms">{{Cite web |date=2025-12-22 |title=DJI Products Terms of Use |url=https://www.dji.com/terms |access-date=2026-03-29 |website=DJI}}</ref> The Mimo app collects location data, device identifiers, & user content;<ref name="dji-mimo-appstore">{{Cite web |title=DJI Mimo on the App Store |url=https://apps.apple.com/us/app/dji-mimo/id1431720653 |access-date=2026-03-29 |website=Apple App Store}}</ref> on Android, the app is not available through Google Play & users must sideload an APK directly from DJI's website.<ref name="dji-sideload">{{Cite web |title=Failure to Download and Install the App |url=https://support.dji.com/help/content?customId=en-us03400006802&spaceId=34&re=US&lang=en |access-date=2026-03-29 |website=DJI Support}}</ref>


== Incidents ==
== Incidents ==
Line 16: Line 16:
=== Forced app activation ===
=== Forced app activation ===


Despite having its own 2-inch OLED touchscreen, 1-inch CMOS sensor, microSD storage, & 1,300 mAh battery, the Osmo Pocket 3 ships as a locked device.<ref name="dji-specs" /> DJI's official documentation states that the camera "requires activation through the DJI Mimo App" before first use.<ref name="dji-beginners-guide" /> DJI's activation instructions require a smartphone with Bluetooth & Wi-Fi enabled to connect to the camera through the Mimo app.<ref name="dji-activation">{{Cite web |title=Activating Your Handheld Products |url=https://support.dji.com/help/content?spaceId=34&customId=en-us03400006759&re=NO&lang=en |access-date=2026-03-29 |website=DJI Support}}</ref>
Despite having its own 2-inch touchscreen, 1-inch CMOS sensor, microSD storage, & 1,300 mAh battery, the Osmo Pocket 3 ships as a locked device.<ref name="dji-specs" /> DJI's official documentation states that the camera "requires activation through the DJI Mimo App" before first use.<ref name="dji-beginners-guide" /> DJI's activation instructions require a smartphone with Bluetooth & Wi-Fi enabled to connect to the camera through the Mimo app.<ref name="dji-activation">{{Cite web |title=Activating Your Handheld Products |url=https://support.dji.com/help/content?spaceId=34&customId=en-us03400006759&re=NO&lang=en |access-date=2026-03-29 |website=DJI Support}}</ref>


The camera allows the owner to skip the activation prompt five times. After the fifth skip, the device locks & requires activation before any further use.<ref name="amateur-photographer">{{Cite web |last=Mold |first=Dan |date=2025-07-06 |title=The DJI Osmo Pocket 3 may be the world's favourite vlogging camera, but for me it has one HUGE drawback |url=https://amateurphotographer.com/latest/opinion/the-dji-osmo-pocket-3-may-be-the-worlds-favourite-vlogging-camera-but-for-me-it-has-one-huge-drawback/ |access-date=2026-03-29 |website=Amateur Photographer}}</ref> DJI's "Activating Your Handheld Products" support page documents the same 5-trial mechanism for the Osmo Action series.<ref name="dji-activation" />
The camera allows the owner to skip the activation prompt five times. After the fifth skip, the device locks & requires activation before any further use.<ref name="amateur-photographer" /> DJI's "Activating Your Handheld Products" support page documents the same 5-trial mechanism for the Osmo Action series.<ref name="dji-activation" />


This isn't unique to the Pocket 3. DJI's activation page lists the Osmo Action series, Osmo Mobile series, Osmo Nano, & Osmo 360 as also requiring Mimo-based activation.<ref name="dji-activation" /> By contrast, the competing FeiyuTech Pocket 3 is "ready to go straight out of the box without the need for an app."<ref name="amateur-photographer" />
This is not unique to the Pocket 3. DJI's activation page lists the Osmo Action series, Osmo Mobile series, Osmo Nano, & Osmo 360 as also requiring Mimo-based activation.<ref name="dji-activation" /> By contrast, the competing FeiyuTech Pocket 3 is "ready to go straight out of the box without the need for an app."<ref name="amateur-photographer" />


=== DJI Mimo app data collection ===
=== DJI Mimo app data collection ===
Line 26: Line 26:
The DJI Mimo app required for activation collects data that Apple's App Store privacy label categorizes as "used to track you": contact information & device identifiers.<ref name="dji-mimo-appstore" /> The app also collects coarse location data, user-generated content (photos, videos, audio), usage data, & diagnostics.<ref name="dji-mimo-appstore" /> Apple's listing notes the app "may use your location even when it isn't open."<ref name="dji-mimo-appstore" />
The DJI Mimo app required for activation collects data that Apple's App Store privacy label categorizes as "used to track you": contact information & device identifiers.<ref name="dji-mimo-appstore" /> The app also collects coarse location data, user-generated content (photos, videos, audio), usage data, & diagnostics.<ref name="dji-mimo-appstore" /> Apple's listing notes the app "may use your location even when it isn't open."<ref name="dji-mimo-appstore" />


A 2020 analysis by cybersecurity firm River Loop Security found that the Mimo app integrated a third-party SDK from MobTech, a Chinese analytics company, which transmitted device information including brand, model, display size, OS version, carrier data, & geolocation to MobTech's servers without encryption.<ref name="riverloop">{{Cite web |date=2020-05-07 |title=Analyzing Data Use by the DJI Mimo App |url=https://riverloopsecurity.com/blog/2020/05/dji_mimo/ |access-date=2026-03-29 |website=River Loop Security}}</ref> River Loop concluded that "even without user consent, the DJI Mimo app sends sensitive information via unsecured means to third-party servers, where the Terms of Use Agreement supports cooperation with the Chinese Government."<ref name="riverloop" /> The analysis also found weak AES-128 ECB encryption with deterministic key construction, making intercepted data recoverable by "a moderately talented attacker."<ref name="riverloop" />
A 2020 analysis by cybersecurity firm River Loop Security found that the Mimo app integrated a third-party SDK from MobTech, a Chinese analytics company, which transmitted device information including brand, model, display size, OS version, carrier data, & geolocation to MobTech's servers without encryption.<ref name="riverloop">{{Cite web |date=2020-05-12 |title=Analyzing Data Use by the DJI Mimo App |url=https://riverloopsecurity.com/blog/2020/05/dji_mimo/ |access-date=2026-03-29 |website=River Loop Security}}</ref> River Loop concluded that "even without user consent, the DJI Mimo app sends sensitive information via unsecured means to third-party servers, where the Terms of Use Agreement supports cooperation with the Chinese Government."<ref name="riverloop" /> The analysis also found weak AES-128 ECB encryption with deterministic key construction, making intercepted data recoverable by "a moderately talented attacker."<ref name="riverloop" />


DJI Mimo isn't available through Google Play on Android.<ref name="hn-sideload">{{Cite web |title=DJI is the only major company that demands you install an APK |url=https://news.ycombinator.com/item?id=37446367 |date=2023-09-12 |access-date=2026-03-29 |website=Hacker News}}</ref> DJI instructs Android users to download & install an APK file directly from their website instead, bypassing Google Play's app review process.<ref name="dji-sideload" />
On Android, DJI instructs users to download & install the Mimo APK directly from their website, bypassing Google Play entirely.<ref name="dji-sideload" />


=== Binding arbitration & class action waiver ===
=== Binding arbitration & class action waiver ===
Line 36: Line 36:
Section 11.6 bars collective legal action: "CLASS ACTION LAWSUITS, CLASS-WIDE ARBITRATIONS, PRIVATE ATTORNEY GENERAL ACTIONS... ARE NOT ALLOWED."<ref name="dji-terms" />
Section 11.6 bars collective legal action: "CLASS ACTION LAWSUITS, CLASS-WIDE ARBITRATIONS, PRIVATE ATTORNEY GENERAL ACTIONS... ARE NOT ALLOWED."<ref name="dji-terms" />


DJI's terms don't offer a general opt-out from the arbitration clause for new users. The only opt-out mechanism applies to future modifications of the clause: users can reject changes within 30 days, but doing so terminates their DJI account, and the prior version of the arbitration clause survives.<ref name="dji-terms" /> Because the camera requires activation through a DJI account,<ref name="dji-beginners-guide" /> account termination renders the hardware dependent on reacceptance of the terms.
DJI's terms do not offer a general opt-out from the arbitration clause for new users. The only opt-out mechanism applies to future modifications of the clause: users can reject changes within 30 days, but doing so terminates their DJI account, and the prior version of the arbitration clause survives.<ref name="dji-terms" /> The camera requires activation through a DJI account,<ref name="dji-terms" /> so an owner who opts out must create a new account and accept the current terms to continue using the device.


== See also ==
== See also ==