Home and Neighborhood

Your house is the one place where the law gives you the strongest privacy, and it is also where you have probably installed the most sensors yourself. A TV that logs what you watch. A speaker that listens for its name. A doorbell that films the sidewalk, your neighbor's driveway and the delivery driver. None of that is sinister by default. All of it creates records that live on someone else's server, and records can be sold, breached, viewed by employees or requested by police.

The threat: what your home gadgets collect and who gets it

The TV that watches back

Most smart TVs ship with automatic content recognition, or ACR. Every so often the TV captures what is on the screen, and that data goes back to the company, where it is matched against a library of known shows, movies and ads. Because it reads the screen itself, it can recognize what comes in through cable, an antenna, a game console or a DVD player, as well as the TV's own apps. Texas's 2025 lawsuits allege the captures happen as often as every 500 milliseconds. The result is a log of what your household watches. Texas alleges the companies sell it to target ads.

Regulators have gone after this twice. On February 6, 2017, Vizio agreed to pay $2.2 million to the FTC and New Jersey to settle charges that it collected viewing histories on 11 million smart TVs without consent. On December 15, 2025, Texas Attorney General Ken Paxton sued Sony, Samsung, LG, Hisense and TCL over ACR, alleging the TVs monitor viewing in real time and send the data to the companies without users' knowledge or consent. Two days later his office announced a temporary restraining order barring Hisense from collecting ACR data about Texans while the case goes on. His office has since posted an agreed final judgment with LG that would bar it from collecting viewing data without affirmative express consent. The posted copy is unsigned, so check its status before you cite it.

Consumer Reports says Google TV itself does not use this kind of recognition. Roku's switch turns off the TV's own recognition, but Consumer Reports notes Roku may still collect data about the apps and streaming services you use.

The speaker that listens for its name

A smart speaker listens locally for its wake word, then records what follows and sends it off for processing. The privacy question is what happens to those recordings afterward. Since March 28, 2025, Amazon no longer offers the Do Not Send Voice Recordings option on the Echo Dot (4th gen), Echo Show 10 and Echo Show 15 in the US, so requests from those devices go to Amazon's cloud. The Don't Save Recordings setting remains, and deletes recordings after Alexa processes them.

Deletion promises have been broken before. On July 19, 2023, the Justice Department and the FTC announced that Amazon would pay a $25 million civil penalty to settle allegations that it kept children's Alexa voice recordings indefinitely by default, and that it told users they could delete their children's recordings, transcripts and location data when it sometimes failed to. Amazon settled without admitting the allegations.

Camera companies, their employees and intruders

A cloud camera means a company holds video of your front door, and sometimes your living room. The FTC said Ring's privacy failures gave employees too much access to customer videos and left accounts open to online attacks, and that in some cases intruders took over customer accounts, cameras and recordings. The settlement required Ring to pay, delete recordings it had no right to keep, and build a privacy and security program. Refunds went out in two rounds, in April 2024 and August 2025, totaling more than $5.4 million.

Police access to your camera video

How police get video from a camera company matters more than any single setting. Ring's law enforcement guidelines, as of October 2026, say it gives content, meaning video, only in response to a valid search warrant. Ring says it does not produce content in response to a subpoena. Ring may respond at once to emergencies involving imminent danger of death or serious injury. It says it generally notifies the account owner before disclosing under a legal demand, and after an emergency disclosure, with exceptions.

That emergency door gets used. In a response to Senator Ed Markey, released July 13, 2022, Ring reported 11 times so far that year when it gave police user video after emergency requests, without the owner's consent.

The other route is asking you. Community Requests let local police and fire agencies ask camera owners in an area to share video. They are voluntary. Ring says agencies see only the videos you choose to share and do not see who ignored a request. But when you send a clip, your home address and your Ring account email go to the investigator with it, and a shared video cannot be pulled back or deleted. Ring announced a planned link between Community Requests and Flock Safety in October 2025, then canceled it on February 12, 2026. Ring says no customer videos were ever sent to Flock. For how private cameras feed police work more broadly, see Private surveillance.

The guidelines also say Ring only has access to video that is not end-to-end encrypted and that was recorded under a current subscription. That is the lever you control, covered at Level 3. Other camera brands set their own rules, so read the maker's law enforcement and encryption pages before you buy.

The router everything rides on

Every device in this lesson talks to the internet through one box, and most people never touch it after the installer leaves. An old router is a soft target. On May 7, 2025, the FBI warned that criminals were breaking into end-of-life routers, ones whose makers no longer issue security patches, and installing proxy software so other criminals could route their traffic through your connection and hide behind your internet address. The FBI said routers from 2010 or earlier likely get no updates, and that a newer variant of the TheMoon malware was found on old routers with remote administration turned on. It needs no password.

Nation-state hackers use the same trick. On January 31, 2024, the Justice Department announced it had disrupted the KV botnet: hundreds of US small office and home office routers, mostly end-of-life Cisco and NetGear models, hijacked by hackers sponsored by the government of China and known privately as Volt Typhoon. The hackers used the routers to hide where their attacks on US critical infrastructure came from. The owners had no idea.

Mail and trash

Low tech, still works. In California v. Greenwood (1988), the Supreme Court held that police need no warrant to search trash left at the curb for collection, because it is exposed to the public and to the collector. Anyone else can look too. Bank statements, medical bills and prescreened credit offers are what an identity thief fishes for.

The neighbor-camera problem

Your camera is part of someone else's privacy problem. A doorbell that covers your porch also covers the sidewalk, the street and maybe your neighbor's front window. Ring's Search Party feature uses AI to scan motion clips from outdoor cameras for a reported lost pet, and Popular Science reports it is on by default. Audio is the sharper issue: a camera that records sound can pick up conversations you are not part of, and in Idaho that runs into the interception law in the legal line below.

Who is most at risk

People who share or have shared a home with someone controlling. Whoever set up the router, the camera app and the Alexa account may still have the passwords, and a shared camera app lets a former partner watch your front door from across town. In June 2018 The New York Times reported that abusers were using app-controlled locks, thermostats and lights to monitor and frighten partners, often after the abuser had moved out. So is anyone whose old router is quietly working for a stranger.

How to reduce it

Level 1 Everyday

Turning off ACR answers the viewing log. The cost is slightly worse recommendations. It does not stop the TV's apps from collecting their own data, and muting a TV's microphone does nothing to ACR, which reads the screen. Paths below are from Consumer Reports, last updated October 19, 2025, and may shift with software updates. Some brands bury a second ad setting nearby; turn that off too.

Don't Save Recordings on an Echo answers the stored-recordings risk. It does not keep your requests off Amazon's servers while they are processed. The microphone button answers the moments you want the speaker deaf, such as a private conversation or a visitor who would rather not be recorded.

The router basics answer the intruder and the botnet. A changed admin password stops anyone who knows the factory default. WPA3 Personal, or WPA2 Personal if your router lacks WPA3, keeps neighbors off your Wi-Fi; the FTC calls WEP and WPA outdated. Updates close known holes. If your router no longer gets updates, the FBI's advice is to replace it, and that is the one real cost here.

Level 2 Careful

A guest network answers the cheap gadget and the visiting laptop. If a poorly secured TV or smart plug gets hijacked, it sits apart from your laptop and phone. The cost is that devices that need to talk to your phone, like casting to a TV, may stop working until you move them back. Turning off remote management, WPS and UPnP closes doors the FTC lists as making a network less secure, and remote management is the door the FBI said the newer TheMoon variant walks through.

On Ring, the Control Center settings answer the scanning and the requests you never asked for. Shredding answers the curb. A cheap cross-cut shredder is the whole cost. Pick up mail daily, or sooner if you are away.

Level 3 Private

Ring's end-to-end encryption answers the company itself, its employees, intruders who reach Ring's servers, and legal demands served on Ring. Only your enrolled phones can watch the clips, so Ring has no video to hand over. It does not stop someone who gets into your phone, and it does not stop you from choosing to share. The cost is lost features, among them Shared Users, ring.com viewing, Alexa and Fire TV viewing, Video Search, Familiar Faces, Video Descriptions, video links and third-party integrations. Ring says it cannot help you recover encrypted video if you lose your recovery options.

Cameras that record locally, with cloud features off, give you the same effect with any brand that supports it: no company copy means no company breach and no company to serve.

Level 4 Hardened

If someone you used to live with set up your smart home, assume they may still have a way in. It happens, and it is fixable. An audit answers the former partner watching your door; it costs an afternoon and possibly a reset of devices you cannot get into. If you are worried that changes will tip off a dangerous person, make a safety plan first. Hyper-vigilance lists help lines.

Level 5 Hyper-vigilant

At this level you own fewer listening and watching devices. Unplug smart speakers in rooms where you talk about things that matter, or get rid of them. Use a TV with no network connection, or never connect the TV to Wi-Fi and use a separate streaming box you control. Keep cameras local-only, with cloud features off, on their own network. That answers the company server holding any record of what happens inside your walls. It costs convenience and some money for replacements.

The ladder for this topic