There are more examples of the internet’s worst traits invading sensitive spaces. The consumer groups Which and Stiftung Warentest recently conducted an investigation that revealed that toys like Furby Connect and CloudPets could be hijacked by low-tech hackers. Hackers can then transmit spoken messages to kids through the toys’ speakers.

Complicating all this is the lackluster state of online privacy and security protections. In the United States in particular, we don’t have very many rules or regulations defending consumers’ online privacy. There aren’t universal trust marks that clearly articulate a product’s security or how consumers’ personal data is used. And there’s limited accountability. Sometimes, a company’s privacy error results in little more than bad P.R.

It’s no surprise, then, that so many people are leery of a more connected future. According to a recent survey by my organization, Mozilla, on the topic, the most tech-savvy among us are also the most concerned about privacy.

So what’s the answer? In the long term, smart policy and regulations can make a difference. Ideally, building privacy and security features into connected devices will become as common as equipping cars with seatbelts or putting a nutrition label on packaged food. There are people and organizations doing important work on this front: Consumer Reports measures and reports on the privacy and security of products and services and the Electronic Frontier Foundation provides cybersecurity training. At Mozilla, we released a holiday shopping guide focusing on privacy to raise awareness.

In the short term — this holiday season — avoid products where the risks outweigh the value, especially when they’re for your kids, who aren’t in a position to agree to take any risk at all. Does your elementary school student really need a toothbrush with location tracking?

Next, do your due diligence. Ask important questions: What personal data is collected, and how is it stored? Is it encrypted? Can the device be updated if a security vulnerability is detected? You can find answers on manufacturers’ websites, in privacy policies and on product forums.

If a connected device is too appealing to pass up, take precautions before putting it in little hands. Before it is unwrapped and in your home, make the most of its privacy and security features. If the product requires an account, create a unique password and enable two-factor authentication. If location tracking is not essential, disable it. Low-tech solutions can work, too: If you’re not expecting to use the camera, cover the lens with dark tape. And turn off the device when it’s not in use.

If you don’t like the answers you find or if you simply can’t find them, select a gift that takes your privacy and security more seriously. Or opt for analog: Sometimes a good book or homemade sweater makes the perfect — and worry-free — gift.