A companion robot is not one device from a privacy perspective. It is a small distributed system inside a home.
The physical shell may contain cameras, microphones and touch sensors. A mobile app manages accounts and settings. Cloud services may handle speech recognition, language generation, media storage, analytics and updates. Support teams and third-party SDKs can introduce additional access paths.
This article offers a lightweight threat-modeling method that developers, reviewers and technically curious buyers can use without needing access to proprietary source code.
Step 1: Draw the data-flow boundary
Start with five boxes:






