A couple years back (2019) Wyze had a breach [0], which accidentally exposed another breach that they hadn't been aware of. This came just six months after a previous breach.

But it suggested that Wyze can remotely disable all encryption and so on whenever they feel like it.

And that for a "subset of users" they collected: "Height, Weight, Gender, Bone Density, Bone Mass, Daily Protein Intake, and other health information", which was included in the breached data.

[0] https://www.nytimes.com/2019/12/30/business/wyze-security-ca...