What I would do if I were manufacturer hellbent on spying would be to search for devices of my own brand nearby to pass data using their internet access, if no access found then extend search - basically p2p/mesh network to pass data.