Smart Home Privacy Checklist: Sensors Are Records

Sensor logs are occupancy records

Motion sensors, door contacts, smart locks and even smart plugs produce timestamped events. Aggregated over weeks, those events describe your household’s routine with considerable precision: what time you wake, when the house empties, which nights nobody is home, when a child arrives from school.

That dataset is valuable to more parties than the one that collected it, and it is qualitatively different from a browsing history because it describes physical presence. Any serious smart home privacy checklist should therefore treat retention settings on sensors with the same seriousness as camera footage, which is not how the category is usually discussed.

The mitigation is straightforward where it is offered: set the shortest retention that still gives you useful history, and prefer systems that keep event logs locally.

Cameras and microphones inside the home

Indoor cameras deserve a deliberate decision rather than a default. Three questions settle most of it.

1. Does it need to be indoors at all? Outdoor and entry cameras deliver most of the security benefit with a fraction of the intrusion.
2. Can it be physically disabled? A privacy shutter or a scheduled off period when the house is occupied is worth more than any software setting, because it is verifiable by looking at it.
3. Where does the footage go? This decides who else can ever see it.

For voice assistants, check whether recordings are retained and reviewed, set auto-delete to the shortest available window, and use the physical microphone mute for rooms and times where you would rather not be heard. A hardware mute is a different assurance from a software one.

Local storage versus cloud

Neither column is universally correct, which is why this is a decision rather than a rule. Local storage keeps footage under your control and demands that you secure your own network properly. Cloud storage is convenient and moves the trust to a company whose retention practices and legal obligations you do not control. Encrypted local storage with the option of remote access is the best of both where a system offers it.

Who else can see it

Household accounts are a common blind spot. Review who is on the account, what each person can see, and whether shared access was granted temporarily and never revoked. Former partners, previous housemates and departed contractors appear on these lists more often than anyone expects.

Then read the vendor’s policy on third-party and law enforcement disclosure. What matters is not whether disclosure can happen — it can, for anyone holding data — but whether the company commits to notifying you, publishes transparency reporting, and offers end-to-end encryption that limits what it is able to hand over in the first place.

The people who did not consent

This is the part a smart home privacy checklist owes to everyone besides its author. Your cameras and microphones record guests, cleaners, babysitters, children and neighbors, none of whom agreed to anything.

Reasonable practice: tell people when recording devices are present, avoid cameras in bathrooms and guest bedrooms entirely, angle outdoor cameras to cover your property rather than a neighbor’s windows or the public street beyond what you need, and be conscious that doorbell footage captures passers-by continuously. Rules on recording audio in particular vary sharply between jurisdictions — check yours.

The audit, twice a year

Devices accumulate, defaults change with updates, and access grants outlive their reason. Twice a year, walk the same route: list every device with a camera, microphone or sensor; check retention settings on each; review account access; remove devices no longer used; and confirm which ones still receive firmware updates.

Unsupported devices are the quiet failure here. A camera that stopped receiving updates three years ago is a networked computer with a lens in your home, and no privacy setting compensates for that.

The checklist

• Set the shortest useful retention on sensors as well as cameras.
• Reconsider indoor cameras; prefer entry and outdoor coverage.
• Use physical shutters and hardware mutes rather than software toggles alone.
• Prefer local or end-to-end encrypted storage where the system supports it.
• Audit household account access and revoke what is stale.
• Tell guests, and keep cameras out of private rooms.
• Retire unsupported devices rather than leaving them connected.
• Repeat the whole route twice a year.

Worked through in that order, a smart home privacy checklist protects two groups at once: the household that installed the system, and everyone who walks into it without having chosen any of this.