Privacy experts and advocates have long warned about some of the threats from the Internet of Things. Our connected smart home devices have the potential to spy on us, to gather, track, and spread our sensitive information and internet activity, and even to become a target for hackers.

Unfortunately, the increasingly common combination of IoT connectivity and a child’s toy can lead to a bone-chilling scenario in which information about your family member is shared online. Previous data breaches involving kids’ apps and IoT toys have grabbed entire customer databases of children’s information, in some cases even including names, addresses and photos of the kids.

As the Internet of Things becomes more widespread and the “it toy” of the holiday season lines the retailers’ shelves, it’s important that consumers do their research before making their purchases.

One great resource is the annual Trouble in Toyland report, which highlights a variety of dangers of popular toys. These dangers range from things like choking hazards to privacy questions, so it’s an all-encompassing type of report. In its 33 years, this report has been responsible for more than 150 toy recalls.

But when shopping for any kind of electronic or interactive toy, consumers can keep a few guidelines in mind before committing to this new purchase:

1. Do you need to register the device or create an account to use it? – Registering your new purchase can protect you in a number of ways, including recall updates and warranty validity. However, do you need to include every piece of information? Do you have to register your child’s information or create an online account in order to use this toy? That might give you pause, depending on the information requested, the age and ability of your kids, and your comfort level with their internet use.

2. Do you leave it turned on at all times in order for it to work? – If this device needs to be left powered on at all times, you might want to think about incorporating it into your household. Besides the drain on your utilities and your home data use for a toy or gadget that might not get used all the time, an “always on” device can lead to security issues. If you can power the device off completely when not in use, it will save both your budget and your privacy.

3. Is your Wi-Fi network protected? – Wi-Fi connections need to be password protected to keep outsiders from jumping into your network. However, a lot of users with IoT-connected toys and household devices overlook the need to protect their wifi routers as well. If your router—the box that makes the internet connection work for all of your wireless gadgets—is unprotected, then anyone who accesses your laptop through a virus could conceivably travel over to your other devices via the router.

As parents and grandparents, it’s understandable to want to give your young family members something from their holiday wish lists, but rushing into a purchase isn’t the best course of action. Do your research and make sure you’re bringing the device into a secure environment before buying.

There’s one final consideration to make when purchasing a new connected toy, especially if it’s an upgrade on a previous version: don’t discard any old connected toys without completely wiping their stored data and deleting any apps or accounts that powered it. If you can’t be sure that any sensitive information is gone from the device—including its usage history, stored identifying information, and more—then physically damage the internal components before discarding it. Remember to look for a responsible recycler so that potentially harmful internal materials don’t end up in the environment.

Read next: “Boss Phishing Bah Humbug: Don’t Fall for this Holiday Scam!”

Tech recycling has been a major environmental and security focus in recent years as consumers discard old computers, outdated cell phones, and other devices. Apart from the danger of leaking these components and their potentially toxic chemicals into a landfill or groundwater, there is the additional risk of an old device falling into the wrong hands, leading to gleaning of the original owner’s data.

Now, consumers are being asked to evaluate their internet-of-things devices. As this technology increases in innovation and new options begin to replace old ones, users will have to keep the same safety and security considerations in mind. It’s not just the concerns over the physical components like contain batteries, copper wiring, mercury, and other toxins, either. An Amazon Alexa, for example, could potentially lead back to your Amazon account, your purchase history, your order history with delivery address, and even recordings of your voice. Likewise, an identity thief would love to get their hands on a medical IoT device that connected your health data to your doctor’s office or medical center, as it “speaks” to and receives messages from your medical records.

Fortunately, e-cycling initiatives have taken hold in many communities around the world. These programs not only keep the electronic components out of the dump, they also ensure that the device is thoroughly wiped clean of user information, old files and photos, and any other data that people wouldn’t want exposed.

Any device that connected to your identifying information, no matter how innocuous or sensitive it might have been, has the potential to be stripped for information by a hacker. Safeguarding your information means ensuring that any information contained within the device or that connected to the device is completely inaccessible. You can search online for e-cycling centers near you before disposing of other devices, but contact them to make sure they can accept IoT devices, especially any medical devices, before bringing them in.

Before discarding any internet-of-things of mobile connected device, wipe it clean of all data and profile information. If you can find the instructions to restore it to factory settings, that is an excellent way to do it. When in doubt, take it back to an authorized retailer for that product and get help determining that your information and your account profile are completely gone, then recycle it with confidence.

 Contact the Identity Theft Resource Center for toll-free, no-cost assistance at (888) 400-5530. For on-the-go assistance, check out the free ID Theft Help App from ITRC.