Smart home devices collect usage patterns, location data, personal preferences, and in some cases biometric data like voice or facial recognition. Device manufacturers, cloud service providers, third-party app developers you've granted permission to, and potentially advertisers can access portions of this information depending on your device and privacy settings.
What Data Do Smart Home Devices Actually Collect?
Smart devices send and receive information to and from the internet, giving you the ability to remotely control products or measure usage data. The scope of data collection extends beyond simple on-off commands.
Usage patterns form the foundation of most smart home data collection. Your devices track when you turn lights on, adjust thermostats, or unlock doors. They record how often you use each function and at what times.
Location data comes into play with devices that use geofencing or travel with you. Many systems track whether you're home or away to trigger automation routines.
Preferences get logged every time you adjust a setting. Your preferred temperature, lighting brightness, or security camera angles all become part of your device profile.
Biometric data represents the most personal category. Voice assistants store audio recordings of your commands. Some cameras use facial recognition to identify family members. Robot vacuum cleaners create digital floor maps of your house that can reveal your home's layout and contents.
The Australian Competition and Consumer Commission has noted that smart home devices collect this broad range of consumer data, with privacy policies and terms of service documents outlining these practices often being lengthy and complex.
Who Has Direct Access to Your Smart Home Data?
Device manufacturers maintain the primary relationship with your data. They operate the cloud servers that process your commands and store your usage history.
Cloud service providers host the infrastructure. If you're using Google Assistant, Amazon Alexa, or Apple HomeKit, those companies run the platforms your devices communicate through.
Third-party app developers can access your data if you've explicitly granted permission. When you connect your smart lights to a scheduling app or integrate your security camera with a home monitoring service, you're sharing data with another company.
Google's approach illustrates how major platforms handle this data. According to Google's safety commitments, they keep video footage, audio recordings and home environment sensor readings separate from advertising and won't use this data for ad personalisation. However, when you interact with Google Assistant, those interactions may be used to better understand your interests for ad personalisation, though not the audio recording itself.
Google will only share video footage with third-party apps and services that work with their devices if you or a member of your home explicitly gives permission.
Can Your Smart Home Data Be Used for Advertising?
Any data shared with smart devices may be used for advertising purposes, according to the eSafety Commissioner. The distinction lies in which specific data gets used and how.
Different manufacturers take different approaches. Some keep device operation data entirely separate from advertising systems. Others use aggregated usage patterns to inform product recommendations.
The interaction data from voice assistants presents a particular case. While the actual audio recording might not fuel ads, the intent behind your request can. Asking your assistant about pizza restaurants might influence what food delivery ads you see later.
Your privacy settings matter here. Most platforms offer controls to limit advertising use of your data, though finding and understanding these settings requires reading through account preferences.
What Australian Regulations Protect Smart Home Privacy?
The Cyber Security (Security Standards for Smart Device) Rules 2025 mandate cyber security standards for most types of consumer-grade smart devices acquired in Australia. These rules address security rather than privacy specifically, but better security reduces unauthorised access to your data.
The Australian Government's guidance on smart homes points to these regulations as the framework for device security standards.
The Australian Competition and Consumer Commission oversees consumer data practices more broadly. Their reviews of smart home device submissions examine how companies collect and handle customer information.
Privacy complaints and concerns fall under the Office of the Australian Information Commissioner. They enforce the Privacy Act, which applies to how businesses handle personal information.
No regulation currently prohibits smart home data collection outright. The focus remains on requiring disclosure, obtaining consent, and maintaining reasonable security standards.
How Do Hubs Handle Your Data?
Hubs create an additional data processing point in your smart home. Some process everything locally, while others route data through cloud services.
The Bosch Smart Home Controller II offers local data storage and encrypted communication, keeping much of your smart home data within your household rather than sending it to external servers.
Bosch Smart Home Controller II
Best for: Users building a Bosch smart home system who want local data storage and encrypted communication
The TP-Link Tapo TP-Link IoT Hub with Chime provides local video storage options, letting you keep camera footage on a memory card rather than uploading it to cloud storage automatically.
TP-Link Tapo TP-Link IoT Hub with Chime
Best for: Households using multiple Tapo smart devices who want local video storage and customisable chime alerts
Also stocked at: The Good GuyseBay AUBIG W
Matter devices require a hub within your household to set up Matter devices and control and automate them remotely when you're away, according to Google Home's Matter documentation. Matter devices that use Thread require a special hub with a built-in Thread border router to connect to your home network.
The hub you choose affects where your data lives and who can access it. Local processing reduces external data sharing but may limit remote access features. Cloud-connected hubs enable more sophisticated automation but send more data outside your home.
For more on how different hubs and platforms handle your data, see our comparison of Aqara Hub M3 vs Philips Hue Bridge vs SmartThings Station.
Philips Hue Bridge (V2)
Best for: Australian households wanting a dedicated Zigbee hub to manage Philips Hue lights with Matter, Apple Home, Google Home, or Home Assistant integration.
What we like
- Operates as a Matter bridge via firmware update and integrates with Apple Home, Google Home, Alexa, SmartThings, and Home Assistant.
- According to Philips Hue Australia, it controls up to 50 lights and 12 accessories over a dedicated Zigbee frequency band.
- Requires no ongoing subscription fees for standard smart lighting control, automations, or remote access.
- Low typical power consumption of 3 W (0.1 W in standby) via the supplied 100–240 V power adapter.
Worth knowing
- Lacks built-in Wi-Fi hardware and requires a permanent wired Ethernet connection to your router or switch.
- Does not include a Thread radio and cannot function as a Thread Border Router.
- Recommended device capacity is limited to roughly 50 lights and 12 accessories per hub.
What Happens When Security Fails?
If wireless connection or information storage is inadequately secured, any data or recordings may be accessed by other people and shared without consent, according to the eSafety Commissioner.
Unauthorised access can occur through weak passwords, unpatched software vulnerabilities, or compromised user accounts. Once someone gains access to your smart home system, they can view whatever data that system collects.
Security camera footage represents an obvious privacy concern. Intruders could watch live feeds or download stored recordings.
Voice assistant recordings could reveal private conversations. Smart lock access logs could show when your home is empty. Even seemingly innocuous data like lighting schedules can indicate your daily routine.
The Australian cyber security rules aim to prevent these scenarios by requiring baseline security standards. However, your own security practices matter too. Strong passwords, regular updates, and careful permission management all reduce risk.
Can You Control What Gets Shared?
Most smart home platforms offer privacy controls, though their location and effectiveness vary.
Account settings typically include options to delete historical data, pause data collection, or limit advertising use. Finding these controls requires navigating through privacy or security sections of your account.
Device-level settings let you disable specific features. Turning off voice recording, disabling camera motion detection, or stopping usage tracking all reduce data collection.
Permission management controls which third-party services can access your data. Regular reviews of connected apps and services help you maintain control over who sees what.
Privacy policies and terms of service documents outlining data collection practices are often lengthy and complex. Consumers must read and comprehend them before using a smart home device, according to the ACCC's review.
You can use contact details enclosed with the product to contact the manufacturer for more details about data collection practices.
Do Local-Only Systems Eliminate Privacy Concerns?
Local control reduces but doesn't eliminate privacy considerations. Even systems that process everything within your home network still collect data about your behaviour and preferences.
Local systems prevent data from leaving your household network. Your usage patterns stay on your hub rather than uploading to manufacturer servers. This prevents external access but doesn't stop the data from existing.
Network security becomes crucial with local systems. If someone gains access to your home network, they can reach your smart home data even if it never touches the internet.
Backup and remote access create complications. True local-only operation means you can't control your home while away. Many "local" systems still use cloud services for remote access features.
The Xnbada SLZB-06 Zigbee Gateway offers flexible connectivity options for users running Home Assistant or Zigbee2MQTT, letting you build local control systems that keep data within your network.
Xnbada SLZB-06 - Zigbee 3.0 to Ethernet,USB,and WiFi Gateway Coordinator with PoE,Universal Zigbee
Best for: users running Home Assistant or Zigbee2MQTT who need flexible Zigbee gateway connectivity options
For more on local control options, our guide to Tuya and Smart Life Devices local control examines which systems can operate without constant cloud connectivity.
What Should You Check Before Buying a Smart Device?
Review the manufacturer's privacy policy before purchasing. Look for clear statements about what data gets collected, who can access it, and how long it's retained.
Check whether the device requires cloud connectivity or offers local operation modes. Devices that function locally give you more control over data sharing.
Identify what permissions the device's app requests. Apps that ask for location, contacts, or microphone access beyond what the device functionality requires should raise questions.
Look for compliance with Australian regulations. The Product Safety Australia guidance on smart home devices provides baseline expectations for safety and security.
Research the manufacturer's track record with security updates. Companies that promptly patch vulnerabilities and support older devices demonstrate better long-term privacy protection.
Consider whether the device integrates with platforms you already use. Adding a new ecosystem means sharing your data with another company. Sticking with existing platforms limits the number of organisations holding your information.
How Does Platform Choice Affect Data Sharing?
Different smart home platforms maintain different data policies and practices. Your choice of ecosystem determines which company holds your information.
Google, Amazon, Apple, and Samsung each operate major platforms. They collect similar categories of data but apply different policies about retention, sharing, and advertising use.
Platform integration creates data dependencies. When you use Google Assistant to control your Philips Hue lights, both Google and Philips can access information about your lighting usage.
Multi-platform homes multiply data sharing. Using Alexa for voice control, Samsung SmartThings for automation, and individual manufacturer apps for device settings means three or more companies access your smart home data.
Our guide on how to switch smart home platforms explains the data implications of moving between ecosystems.
Open standards like Matter aim to reduce platform lock-in. However, Matter devices still communicate through platform hubs, meaning data still flows through Google, Apple, Amazon, or Samsung infrastructure.
Sources
- Australian Government Energy - Smart Homes
- ACCC Product Safety - Smart Home Devices Guide
- Australian Legislation - Cyber Security Rules 2025
- eSafety Commissioner - Smart Home Gift Guide
- Google Home Australia - Matter Support
- ACCC - Smart Home Device Submission
- Google Safety Centre - Nest Privacy Commitments
Comments
Leave a comment