Click “Reject All” and They Track You Anyway

Wyze, the company that sells you cameras to watch your home, is accused of sharing your browsing habits with TikTok, Meta, Google, Snap, and Twitter. Even when you tell them not to. A new class action says clicking “reject cookies” on their site does nothing.

State of Surveillance Editorial Team

A small white home security camera on a shelf inside a living room
Photo via Unsplash

TL;DR: Wyze Labs, the company that makes budget home security cameras, is facing a class action lawsuit in Washington federal court. The suit alleges Wyze embeds tracking pixels from TikTok, Meta, Google, Snap, and Twitter on its website, and shares visitor browsing activity with all five companies even when users explicitly reject non-essential cookies. This is the same company that accidentally showed 13,000 customers other people’s camera feeds in February 2024 and ignored known security vulnerabilities for three years before that. The cookie rejection button on their website is, the plaintiffs allege, decorative.

The Lawsuit: “Reject All” Means Nothing

On April 17, 2026, a class action was filed in the U.S. District Court for the Western District of Washington: Wheeler et al v. Wyze Labs Inc. [1].

The complaint alleges that Wyze’s website deploys tracking pixels from at least five social media companies (TikTok, Meta (Facebook), Google, Snap, and Twitter) that monitor visitors’ browsing behavior. Page views, clicks, product browsing, and session activity all get packaged and sent to these companies’ advertising platforms [1] [2].

The catch: Wyze’s cookie consent banner offers a “reject non-essential cookies” option. The lawsuit claims that clicking it does nothing. The tracking pixels keep firing. Your browsing data still flows to TikTok’s servers. Meta still gets it. Google still gets it. The button is theater [1].

Levi & Korsinsky is representing the plaintiffs [1].

A Security Camera Company That Can’t Secure Anything

Wyze sells itself as affordable home security. Cameras, doorbells, sensors: the stuff you install to keep your family safe. The marketing pitch is trust: you’re giving this company a live video feed of your home.

The company’s track record suggests that trust is misplaced.

February 2024: Around 13,000 Wyze customers opened their app and saw thumbnails from other people’s cameras. Some could click through and watch video from strangers’ homes. Wyze blamed a “third-party caching client library” that mixed up device IDs between accounts [3] [4].

September 2023: A similar incident: users reported seeing camera feeds that weren’t theirs through the Wyze web portal [5].

2022: Security researchers at Bitdefender found three vulnerabilities in Wyze cameras that gave attackers direct access to the devices, including recordings stored on SD cards. Consumer Reports called Wyze out for not fixing these flaws for three years [6].

2019: A data breach exposed the personal information of 2.4 million users, including email addresses, WiFi SSIDs, and body metrics from connected scales. Wyze didn’t discover it for weeks [7].

And now: the company’s website tracks your every click and sends it to five ad platforms, regardless of your cookie preferences.

What Tracking Pixels Actually Do

A tracking pixel is a tiny, invisible image or JavaScript snippet embedded in a web page. When the page loads, the pixel fires, sending data about your visit to a third-party server. That data typically includes:

  • What pages you viewed
  • How long you spent on each page
  • What products you looked at
  • Your IP address and approximate location
  • Your browser, device, and operating system
  • A unique identifier tied to your ad profile

TikTok’s pixel, Meta’s pixel, Google’s tag: they all work the same way. Companies embed them so they can retarget you with ads later. You browse Wyze’s website looking at cameras. An hour later, TikTok shows you a Wyze ad. That’s the pixel at work. The same commercial data pipelines also feed government surveillance through the data broker loophole.

The problem isn’t that these pixels exist. It’s that Wyze gives you a “reject” button and then ignores your choice. Under a growing body of state wiretap law, that may be illegal.

What You Can Do

  • Use a browser with built-in tracker blocking: Firefox with Enhanced Tracking Protection, Brave, or Safari all block many tracking pixels by default. Chrome does not
  • Install uBlock Origin: It blocks tracking pixels, including TikTok’s and Meta’s, before they fire. Available for Firefox and Chrome
  • Don’t rely on cookie banners: As the Wyze suit illustrates, clicking “reject” may do nothing. Assume you’re being tracked unless your browser is actively blocking trackers
  • Review your smart home vendor: If Wyze is sharing your website data with five ad companies, what are they doing with your camera data? Check the Mozilla *Privacy Not Included database to see how your devices score
  • If you’re a Wyze customer: Consider whether a company with this privacy record should have a live video feed of your home. Alternatives like Reolink and some Eufy devices offer local-only storage with no cloud requirement

References

  1. Law360: Security Camera Co. Tracks, Shares Website Activity, Suit Says (April 17, 2026)
  2. Law360: Wheeler et al v. Wyze Labs Inc., Case No. 2:26-cv-00XXX (W.D. Wash.)
  3. Washington Post: Wyze Security Issue Exposed Private Cameras to 13,000 Strangers (February 2024)
  4. CNN: Wyze Breach: About 13,000 Home Security Customers Were Shown Someone Else’s Home (February 2024)
  5. Malwarebytes: Wyze Cameras Show the Wrong Feeds to Customers. Again. (February 2024)
  6. SafeWise: Wyze Cameras Mess Up Again: Is It Time to Get Rid of Yours? (2024)
  7. Twingate: Wyze Data Breach: What & How It Happened (2019 Breach Overview)
  8. Inside Class Actions: Website Wiretapping Roundup: 2025 Decisions and Developments (January 2026)

Published: April 22, 2026