Everyone I've seen selling IoT things have been selling "non-Internet connected network of things that we call IoT because that sounds cooler". The IoT is when the devices are connected to the Internet. Not when they are connected to a proprietary private network owned, controlled and managed by a single company, and "Internet" access is through a paywalled proxy. My home power meter is "IoT" and there is no way to access it from the Internet, directly or indirectly. Though the reports the power company pulls through their closed and private network are shared time-delayed in emails and paper reports sent out.
Similar are the mobile-phone network IoT car-based devices, a number of which will "IoT" when back at base, through secure WiFi to a private server, with no data in the loop *ever* traveling over the Internet (unless the customer buying the solution goes out of their way to send things over a WAN, that's still not Internet connectivity, just using the Internet for a private WAN).
The level of control around IoT at the moment prevents any IoT from working over the Internet. The IoT is when every device in your house is connected (probably IPv6, with a /56 for your personal items), and you can reach your own stuff from anywhere. When the "lock your door remotely" is app-based and locked into your Samsung phone, and Samsung home server, and lock from a short approved list that pays Samsung (sorry, the last IoT home demo I saw was one of Samsungs), that's not IoT, that's a Samsung home automation solution.