Under the Federal Wiretap Act[1] intentionally using a device to intercept an electronic communication is a crime. Since the NYT article indicates the investigation is focused on device manufacturers and the article notes the devices may have facilitated the sharing of user data without consent this is the most likely potential charge.

[1]https://www.law.cornell.edu/uscode/text/18/2511