Audio Version: Audio player to be added by SCN before publication.

Your child’s new smartwatch can tell you where they are. It can also tell someone else, and the box may not explain who holds that data. That is why a GPS tracker for kids is a data decision before it is a safety purchase.

Maybe you bought a watch for a first walk to school or a solo bus ride. It’s charged on the kitchen counter and paired to your phone in four minutes. Before your child wears it, take a few more minutes to check what’s happening behind the screen.

Quick Review

• Germany’s BSI found that none of three tested watches had secure default settings.
• A product’s brand name may not reveal which app platform or backend holds your child’s data.
• Check the app, update support, account security, data collection, deletion process, and simpler alternatives before buying.
• After setup, secure the parent account, check reset protections, and explain the watch’s features to your child.

Why A GPS Tracker For Kids Is A Data Decision

A GPS tracker for kids can collect more than location. Depending on its features, it may also handle messages, voice notes, video calls, and movement patterns. Together, those details can form a sensitive profile of a child’s routines and contacts, and that profile can outlast the device itself.

Products made for children are not automatically held to higher security standards. In one survey, up to 80% of parents said they track their children’s locations, according to 6abc Philadelphia’s report on Consumer Reports testing. That makes it worth looking past the watch itself and checking the app and services behind it.

What Germany’s Security Agency Found In Three Kids’ Watches

On October 19, 2026, Germany’s Federal Office for Information Security (BSI) published an investigation of the One2Track Connect Neo, Garmin Bounce, and Imoo Z3, including their Android apps and data transmissions. The BSI report and heise’s summary say none had secure default settings.

Two watches sometimes sent sensitive information unencrypted: video-call data from the Connect Neo, and text messages, chat media, and nearby Wi-Fi details from the Imoo Z3. Nearby Wi-Fi information could potentially help someone work out a child’s location. The Garmin Bounce and Imoo Z3 did not reliably prevent factory resets or the addition of unsecured Wi-Fi networks. Resetting the Connect Neo switched off its block on unknown callers.

The BSI also found unclear update support, a model that could not receive over-the-air firmware updates, and personal data left in storage or an app sandbox after account deletion or transfer. Manufacturers partly addressed issues with updates or promised fixes.

The Brand Name Does Not Tell You Which Server Holds Your Child’s Location

Independent security research reported by WIRED found that more than 70 GPS-enabled watches and car accessories shared a small number of supply chains. Researchers Vangelis Stykas and Felipe Solferini found 30-plus brands using YiQingTeng technology, associated with Wonlex, Shenzhen 3G Electronics, and the SETracker app. Another 30-plus brands used the NewGPS2012 platform; SinoTrack was a third major platform.

The researchers documented security flaws that could allow actions such as tracking a device, spoofing its location or messages, changing emergency contacts, and accessing audio or camera features. Their Sweden-and-Spain example makes the issue clear: differently branded watches could send location data to the same backend, without parents knowing. A shared vulnerability may therefore affect many brands, and a product label alone may not reveal who operates its app or server.

After WIRED published, SETracker said it had blocked certain ports used by a legacy system and required a small subset of clients to upgrade. The company said, “The vulnerability has now been thoroughly remediated.” SinoTrack and NewGPS2012 did not respond to WIRED’s requests for comment.

A 6-Point Check Before You Buy

1. Find the app name. Search the listing’s app name with the word “security” before paying. If the listing does not name the app at all, treat that as a warning sign.
2. Check update support. Look for a stated security-update window. Avoid models that cannot receive firmware updates over the air.
3. Look for two-factor authentication. Check whether the parent app supports it, not only whether the watch has a password or PIN.
4. Review what it collects. Ask whether it handles messages, voice notes, photos, or video calls in addition to location.
5. Read the deletion instructions. Find out how to delete an account and whether data is erased from the device itself.
6. Consider a simpler option. A Bluetooth tag or family tools already built into a phone may meet your needs with fewer connected features.

Consumer Reports reviewed privacy policies, app permissions, default settings, and data handling across 15 devices. Its results varied by category: Tack scored highest for data security among GPS trackers, BoT Talk for data privacy, and Garmin Bounce for smartwatch data security. That last result does not cancel out the BSI’s finding about factory-reset protections. The tests examined different things. See SCN’s guide to why parental controls are one layer, not a complete safety plan.

More than 30 brands of GPS trackers, many of them kids’ watches, were found running on the same backend, so a single flaw can expose every child wearing one of them.

Know a parent who needs this? Send it to them.

The 10-Minute Setup Most Families Skip

After unboxing, take these steps before your child starts wearing the watch:

• Set a unique password and turn on two-factor authentication for the parent account.
• Confirm the watch cannot be factory reset by your child. Check whether a reset changes caller or privacy settings.
• Rebuild the approved-caller list after any reset.
• Review location sharing and any third-party data sharing.
• Tell your child what the watch can do and who can see its information.

Compare the watch’s controls with device-level parental tools, but remember that settings are only one layer of protection.

When The Watch Gets Passed Down Or Sold

The BSI found some personal data remained on every tested model after an account was deleted or a watch was passed on. Before giving one away, follow the manufacturer’s full erase process for both the watch and its app account. If you cannot confirm that stored data is cleared, consider keeping the device rather than reselling it.

Talk To Your Child About Being Tracked

The BSI cautions that constant monitoring can conflict with a child’s right to privacy. Consumer Reports also advises parents not to set up a tracker without telling their child. Explain the purpose, what you can see, and when you plan to check.

You might say: “This watch helps us coordinate when you travel on your own. Let’s talk about what it shares and when we’ll use it.” For older children, ask what boundaries feel fair and revisit the plan as they become more independent.

What The Law Requires Behind The App

COPPA requires verifiable parental consent before a company collects personal information from a child under 13. In 2026, enforcement has increasingly examined product design rather than only what a company says in a policy. August settlements involving Meta and TikTok and ByteDance resolved claims, including alleged COPPA violations. They were settlements, not findings of liability about every product. This overview of children’s privacy enforcement explains the broader context.

The practical takeaway for families: a watch can carry a strong privacy policy and still fail on a factory reset or a shared login. Ask about both.

Frequently Asked Questions

Are Kids' Smartwatches Safe?

Some may offer useful privacy and security protections, but safety depends on the model, app, settings, updates, and data practices. Review those details before buying and again after setup.

Can Someone Track My Child Through Their Smartwatch?

Security flaws may expose location or other features. The independent research reported by WIRED documented possible tracking and location spoofing on affected platforms. That does not mean every watch or user is affected, but it supports checking the app provider and account safeguards.

Is A GPS Tracker Better Than A Phone For A Young Child?

It depends on your family’s needs. A tracker may offer fewer features than a phone, but it still connects to apps and servers and may collect sensitive data. Compare what each option collects and whether a simpler tool is enough.

What Should I Do With An Old Kids Smartwatch?

Delete the account, follow the manufacturer’s full erase steps, and check the app for any remaining data. If you cannot verify that personal data is removed, avoid passing the watch on.

Have you bought a kids’ smartwatch, and would you buy one again? Tell us in the comments.

Join the SCN newsletter for practical guidance on children’s digital well-being, privacy, and online safety.

If this helped, share it with another parent and follow Secure Children's Network on Facebook, X and LinkedIn for safety alerts.

Author: Janice Robinson-Celeste