@CortAndrus 

Only TP-Link has access to the data is collected. With the Deco product, after it's bound to a cloud account, we will collect the limited device-level data and minimized personal info to deliver the basic functionality such as you can control and manage your Deco, anywhere, and anytime.

On our end, we won't send marketing communications without any notification or your consent, and we won't sell user data to third parties. We may only transfer personal data to third parties if this is required for the fulfillment of our services. In this particular case, third-party services form part of our services (e.g., HomeCare function provided by Trend Micro on some routers). If you do not want the information transfer to third parties, you can choose do not to use the features, such as do not use the HomeCare function.

@Tony thanks for the timely and thoughtful reply.