Keep all the processing on device? Do so in a way that is legal in the jurisdiction you are selling the devices in without claiming it's the owner's responsibility to get consent from all individuals (even if they cannot legally consent because they are, say, a child!?) to comply with wiretapping laws in their own home? Choose not to sell an object that comes with software made to spy on you and sell all it learns to advertisers?

That fact that you read something like this as acceptable "legal boilerplate" just shows how, very sadly in my opinion, invasions of privacy have been normalized by these corporations.