A companion robot is not one device from a privacy perspective. It is a small distributed system inside a home.

The physical shell may contain cameras, microphones and touch sensors. A mobile app manages accounts and settings. Cloud services may handle speech recognition, language generation, media storage, analytics and updates. Support teams and third-party SDKs can introduce additional access paths.

This article offers a lightweight threat-modeling method that developers, reviewers and technically curious buyers can use without needing access to proprietary source code.

Step 1: Draw the data-flow boundary

Start with five boxes: