We-Vibe
We-Vibe We-Vibe/Amazon

A Canadian sex toy maker has settled a class-action lawsuit over the company’s alleged practice of collecting sensitive personal information about its users without their consent, according to a report from the National Post. Ottawa-based Standard Innovation, the maker of the internet-enabled We-Vibe vibrator, has agreed to destroy all information it has already collected from the connected vibrator and will stop all future collection.

In addition, the company will pay $2.97 million. Standard Innovation will not admit to any wrongdoing in the settlement in the We-Vibe vibrator lawsuit.

Read: Are Smart Toys Spying On You? Millions Of Passwords And Messages Sent Through Smart Toy Leak Online

The suit was brought against the company by two anonymous women, who were alerted to the We-Vibe’s invasive data collection practices after a presentation at the hacking conference Def Con.

At last year’s conference in August, two hackers from New Zealand showed how Standard Innovation servers received information about the We-Vibe 4 Plus sex toy from the We-Connect app, which allowed the toy to be controlled remotely.

While the device was in use, the app would share information on a minute-to-minute basis, providing updates to the manufacturer, including disclosing the device’s temperature and changes in intensity. About one-third of the more than 300,000 people to purchase a We-Vibe vibrator have used the linked app, according to the lawsuit.

Standard Innovation claimed, at the time, that the collected information was solely for “market research purposes, so that we can better understand what settings and levels of intensity are most enjoyed.”

Read: FTC: IoT Security, Privacy Concerns Need To Be Addressed By Businesses, Consumers And Government

The women brought the suit just one month after the presentation at Def Con and accused Standard Innovation of failing to notify or warn users of the device’s data collection practices. The suit claimed the company was in violation of the Federal Wiretap Act and failed to meet a number of privacy and consumer protection statutes.

Standard Innovation has since updated its privacy policy and have granted users the ability to opt out of sharing anonymous data. The company also no longer requires users to register their device or provide personally identifying information such as name, email or phone number.

As part of the settlement, people who purchased a We-Vibe device before Sept. 26, 2016 and used the app are may receive up to $10,000. Those who used the device without the app can receive up to $199.