DJI Osmo Pocket 3: Difference between revisions
keith review fixes: tightened lede to match 5-skip mechanism, dropped hacker news citation, fixed river loop date, corrected claim-source alignment |
full rewrite from stub. fixed wrong release year (was 2025, actually 2023) & wrong product type (not an action camera). added sources for forced activation, mimo app data collection, binding arbitration clause. removed unsourced advocacy paragraph. |
||
| Line 10: | Line 10: | ||
}} | }} | ||
The '''DJI Osmo Pocket 3''' is a 3-axis gimbal camera released in 2023 that locks after five uses unless the owner installs the [[Forced app download|DJI Mimo smartphone app]] & completes a mandatory [[Activation|activation]] process.<ref name="dji-beginners-guide">{{Cite web |title=A Beginner's Guide to Osmo Pocket 3 |url=https://support.dji.com/help/content?customId=en-us03400009024&spaceId=34&re=US&lang=en |access-date=2026-03-29 |website=DJI Support}}</ref><ref name="dji-specs">{{Cite web |title=Osmo Pocket 3 - Specs |url=https://www.dji.com/osmo-pocket-3/specs |access-date=2026-03-29 |website=DJI}}</ref><ref name="amateur-photographer">{{Cite web |last=Mold |first=Dan |date=2025-07-06 |title=The DJI Osmo Pocket 3 may be the world's favourite vlogging camera, but for me it has one HUGE drawback |url=https://amateurphotographer.com/latest/opinion/the-dji-osmo-pocket-3-may-be-the-worlds-favourite-vlogging-camera-but-for-me-it-has-one-huge-drawback/ |access-date=2026-03-29 |website=Amateur Photographer}}</ref> That activation forces acceptance of [[DJI]]'s terms of use, which include binding arbitration & a class action waiver.<ref name="dji-terms">{{Cite web |date=2025-12-22 |title=DJI Products Terms of Use |url=https://www.dji.com/terms |access-date=2026-03-29 |website=DJI}}</ref> The Mimo app collects location data, device identifiers, & user content;<ref name="dji-mimo-appstore">{{Cite web |title=DJI Mimo on the App Store |url=https://apps.apple.com/us/app/dji-mimo/id1431720653 |access-date=2026-03-29 |website=Apple App Store}}</ref> on Android, | The '''DJI Osmo Pocket 3''' is a 3-axis gimbal camera released in 2023 that locks after five uses unless the owner installs the [[Forced app download|DJI Mimo smartphone app]] & completes a mandatory [[Activation|activation]] process.<ref name="dji-beginners-guide">{{Cite web |title=A Beginner's Guide to Osmo Pocket 3 |url=https://support.dji.com/help/content?customId=en-us03400009024&spaceId=34&re=US&lang=en |access-date=2026-03-29 |website=DJI Support}}</ref><ref name="dji-specs">{{Cite web |title=Osmo Pocket 3 - Specs |url=https://www.dji.com/osmo-pocket-3/specs |access-date=2026-03-29 |website=DJI}}</ref><ref name="amateur-photographer">{{Cite web |last=Mold |first=Dan |date=2025-07-06 |title=The DJI Osmo Pocket 3 may be the world's favourite vlogging camera, but for me it has one HUGE drawback |url=https://amateurphotographer.com/latest/opinion/the-dji-osmo-pocket-3-may-be-the-worlds-favourite-vlogging-camera-but-for-me-it-has-one-huge-drawback/ |access-date=2026-03-29 |website=Amateur Photographer}}</ref> That activation forces acceptance of [[DJI]]'s terms of use, which include binding arbitration & a class action waiver.<ref name="dji-terms">{{Cite web |date=2025-12-22 |title=DJI Products Terms of Use |url=https://www.dji.com/terms |access-date=2026-03-29 |website=DJI}}</ref> The Mimo app collects location data, device identifiers, & user content;<ref name="dji-mimo-appstore">{{Cite web |title=DJI Mimo on the App Store |url=https://apps.apple.com/us/app/dji-mimo/id1431720653 |access-date=2026-03-29 |website=Apple App Store}}</ref> on Android, DJI's support site provides APK sideload instructions for users who encounter installation problems.<ref name="dji-sideload">{{Cite web |title=Failure to Download and Install the App |url=https://support.dji.com/help/content?customId=en-us03400006802&spaceId=34&re=US&lang=en |access-date=2026-03-29 |website=DJI Support}}</ref> | ||
== Incidents == | == Incidents == | ||
| Line 24: | Line 24: | ||
=== DJI Mimo app data collection === | === DJI Mimo app data collection === | ||
The DJI Mimo app required for activation collects data that Apple's App Store privacy label categorizes as " | The DJI Mimo app required for activation collects data that Apple's App Store privacy label categorizes as "Data Used to Track You": contact info & identifiers.<ref name="dji-mimo-appstore" /> The app also collects coarse location data, user-generated content (photos, videos, audio), usage data, & diagnostics.<ref name="dji-mimo-appstore" /> Apple's listing notes the app "may use your location even when it isn't open."<ref name="dji-mimo-appstore" /> | ||
A 2020 analysis by cybersecurity firm River Loop Security found that the Mimo app integrated a third-party SDK from MobTech, a Chinese analytics company, which transmitted device information including brand, model, display size, OS version, carrier data, & geolocation to MobTech's servers without encryption.<ref name="riverloop">{{Cite web |date=2020-05-12 |title=Analyzing Data Use by the DJI Mimo App |url=https://riverloopsecurity.com/blog/2020/05/dji_mimo/ |access-date=2026-03-29 |website=River Loop Security}}</ref> River Loop concluded that "even without user consent, the DJI Mimo app sends sensitive information via unsecured means to third-party servers, where the Terms of Use Agreement supports cooperation with the Chinese Government."<ref name="riverloop" /> The analysis also found weak AES-128 ECB encryption with deterministic key construction, | A 2020 analysis by cybersecurity firm River Loop Security found that the Mimo app integrated a third-party SDK from MobTech, a Chinese analytics company, which transmitted device information including brand, model, display size, OS version, carrier data, & geolocation to MobTech's servers without encryption.<ref name="riverloop">{{Cite web |date=2020-05-12 |title=Analyzing Data Use by the DJI Mimo App |url=https://riverloopsecurity.com/blog/2020/05/dji_mimo/ |access-date=2026-03-29 |website=River Loop Security}}</ref> River Loop concluded that "even without user consent, the DJI Mimo app sends sensitive information via unsecured means to third-party servers, where the Terms of Use Agreement supports cooperation with the Chinese Government."<ref name="riverloop" /> The analysis also found weak AES-128 ECB encryption with deterministic key construction, meaning that "even seemingly encrypted data sent from a user's device could be recovered from a moderately talented attacker, let alone a Nation State."<ref name="riverloop" /> | ||
On Android, DJI instructs users to download | On Android, DJI's support site instructs users who have trouble installing the app to download the Mimo APK directly from DJI's website.<ref name="dji-sideload" /> | ||
=== Binding arbitration & class action waiver === | === Binding arbitration & class action waiver === | ||
| Line 34: | Line 34: | ||
Activating the camera through DJI Mimo requires agreeing to DJI's Product Terms of Use (last updated December 22, 2025), which state in their preamble that "all disputes between you and DJI Entities will be resolved by binding arbitration."<ref name="dji-terms" /> Section 11 contains the full arbitration framework, administered under the Federal Arbitration Act & governed by American Arbitration Association (AAA) rules.<ref name="dji-terms" /> | Activating the camera through DJI Mimo requires agreeing to DJI's Product Terms of Use (last updated December 22, 2025), which state in their preamble that "all disputes between you and DJI Entities will be resolved by binding arbitration."<ref name="dji-terms" /> Section 11 contains the full arbitration framework, administered under the Federal Arbitration Act & governed by American Arbitration Association (AAA) rules.<ref name="dji-terms" /> | ||
Section 11.6 bars collective legal action: "CLASS ACTION LAWSUITS, CLASS-WIDE ARBITRATIONS, PRIVATE ATTORNEY GENERAL ACTIONS... ARE NOT ALLOWED."<ref name="dji-terms" /> | Section 11.6 bars collective legal action: "CLASS ACTION LAWSUITS, CLASS-WIDE ARBITRATIONS, PRIVATE ATTORNEY-GENERAL ACTIONS... ARE NOT ALLOWED."<ref name="dji-terms" /> | ||
DJI's terms do not offer a general opt-out from the arbitration clause for new users. The only opt-out mechanism applies to future modifications of the clause: users can reject changes within 30 days, but doing so terminates their DJI account, and the prior version of the arbitration clause survives.<ref name="dji-terms" /> The camera requires activation through a DJI account,<ref name="dji-terms" /> so | DJI's terms do not offer a general opt-out from the arbitration clause for new users. The only opt-out mechanism applies to future modifications of the clause: users can reject changes within 30 days, but doing so terminates their DJI account, and the prior version of the arbitration clause survives.<ref name="dji-terms" /> The camera requires activation through a DJI account,<ref name="dji-terms" /> so account termination raises the question of whether the owner can continue using already-activated hardware or must reaccept the current terms. | ||
== See also == | == See also == | ||