Maybe a step further for privacy: a physical "config mode" toggle on top of the vacuum that enables the BlueTooth radio for a point-to-point connection with the phone app, then toggle it back when you're done. Wouldn't prevent the vacuum from caching data during its work and sending it when in config mode though, I suppose.