My APAP machine has a sim card and unless I am careful to not disable airplane mode every time I start it up, it will send all of my health data to company that I have signed no agreement with.
I explicitly declined to agree to the privacy policy of the company that sold it to me.
If I find my data in a breach, lawyers will be involved.