The article mentions this bit:

> The researchers also found that other smart devices including speakers and cameras were sending user data to dozens of third parties including Spotify and Microsoft.

Maybe someone can find the referenced studies to see what data is actually sent...