The more data we collect, the more risk we take on of having our information compromised in a breach, or potentially having companies sell that data to third parties for marketing, insurance profiling, or other purposes that you don't even know you're opting into.

"People were cautious years ago when it came to more sensitive data types, but increasingly they're finding enormous value in being able to access and use that information," Jules Polonetsky, CEO of the Future of Privacy Forum, a nonprofit focused on consumer data protection, told ZDNET. "The downside is they're not always taking the time to think through where, when, and how they ought to be taking any precautions."

Over 20 states have now passed comprehensive data privacy laws, which generally give consumers the right to access, delete, and opt out of the sale of their personal information. However, they vary by state, and without federal regulation, what's left is a patchwork quilt of requirements.

Meanwhile, more than 560 million people worldwide now own smartwatches -- including more than 1 in 4 Americans, according to Statista. "Consumers are increasingly interested in downloading, accessing, and using their health data for fitness, or managing their family's health records, but really have to be sleuths to understand whether or not they are protected based on the state they're in," Polonetsky said. "The number one thing we need is a federal privacy law, which includes at least a minimum of health data protection outside of HIPAA."