Smart-home hubs can handle far more than spoken commands. Depending on the hub, app, account and connected accessories, records may include your home and room names, device states, control actions, sensor readings, technical diagnostics, voice transcripts, audio clips, video and derived events. Some processing happens on the device; other data may be sent to a vendor or accessory maker for cloud processing.
Privacy therefore depends on the feature and data flow, not on a single “private” label. The practical approach is to identify what each service collects, where it is processed, how long it is retained, who can access it, and which controls actually delete or prevent it.
As an Amazon Associate I earn from qualifying purchases.
What information can a smart-home hub see?
A hub is usually one part of a larger system. A voice assistant, mobile app, vendor account, connected-device manufacturer and optional cloud subscription may each receive different information. A hub can often see or store the following categories.
Home layout and device inventory
Setup information can reveal the shape of your home even without a voice recording. Typical fields include the home name or address, postal code, room names, device names and device types. Naming a device “Nursery fan” or “Back-door camera” creates a useful map for the service and anyone with access to the account.
#1 Best Overall
- Home Assistant provides a professional and reliable platform for home automation, designed to run continuously 24/7.
- Powered by a 64-bit Quad-Core Cortex-A53 processor, delivering smooth and efficient performance for smart home automations.
- Includes 4GB SDRAM for reliable multitasking and 64GB eMMC
- Features a Mali-450 MP2 GPU for responsive visual interfaces, housed in a compact 85 × 85 × 15mm (3.35" × 3.35" × 0.59") design that fits easily in any space.
- Typical power consumption is under 10W, with fanless operation for quiet performance suitable for any room in your home.
Commands, controls and device state
Platforms may log voice, touch and app interactions, such as turning a light on, changing a thermostat, opening a lock or adjusting a routine. They can also record the resulting state, schedules, automation rules and settings. Amazon’s Alexa documentation distinguishes smart-home device status and usage history from voice requests about those devices; both categories can matter when you review your account.
Sensor and camera information
Motion, light, temperature, humidity, smoke and carbon-monoxide readings can describe when people are home and what is happening inside. Cameras add video, audio and event labels such as “person detected” or “package seen.” Some services keep the raw recording, while others retain a derived event, thumbnail or notification. A camera or environmental-sensor policy may differ from the policy for a speaker, especially when a subscription is involved.
Voice and audio data
Voice-enabled products normally separate several stages and data types:
Recommended Free Tools
- Local wake-word detection: the device continuously analyzes nearby sound for its activation phrase. This local process is not the same as uploading every sound to a server.
- Detected interaction: after an activation is detected, the relevant audio may be sent to a service for speech recognition and command handling.
- Transcript and interaction record: the service may retain text, intent, time, device and response information in account activity.
- Saved recording: some products retain the audio clip itself, subject to history and recording settings.
Calling a device “always listening” without explaining these stages is misleading. A microphone can be monitoring locally for a wake word while the service still receives and processes audio after activation. Turning off saved audio does not necessarily prevent the short-lived processing needed to answer a command.
Technical and network metadata
Services can collect model and serial identifiers, software versions, IP and MAC addresses, Wi-Fi connectivity, nearby network-device information, diagnostics and crash data. This metadata can remain associated with an account even after a voice or event history entry is deleted.
Account, sharing and integration data
Home members, shared accounts, third-party skills, automations and linked services create additional access paths. An integration may receive a command or device state even when the hub vendor does not store the same detail. Removing an integration limits future access, but it cannot retroactively erase records already held by that provider.
Rank #2
- Custom fit design provides a snug and secure hold for your compatible with Home Assistant Green, ensuring stability and easy access at eye level.
- Space-saving wall installation helps declutter surfaces by moving your smart home hub off counters and onto the wall for a cleaner setup.
- Durable construction crafted for reliable long-term use with quick and straightforward mounting on various wall surfaces.
- Sleek minimalist style complements modern home aesthetics while keeping ports and displays accessible.
- This product is a third-party accessory designed to be compatible with Home Assistant. Our products are not affiliated with, authorized, or endorsed by it and are mentioned for compatibility purposes only.
Where does processing happen?
“Local” and “cloud” are not all-or-nothing descriptions. A single command may be detected locally, sent to a vendor for interpretation, delivered to an accessory maker, and returned to the hub for execution. Notifications, remote access, backups, software updates and account login can involve external services even when basic automations run on the home network.
Local processing
Local processing keeps a function on the hub or another device in the home and can allow it to continue during an internet outage. It reduces routine cloud exposure, but it does not automatically make every accessory local. The device may still require a vendor account for setup, firmware updates or advanced features.
Cloud processing
Cloud services make speech recognition, remote control, multi-home access, large-scale video storage and cross-device synchronization easier. The trade-off is that the provider operates the servers, sets retention rules and controls account-level deletion tools. A privacy setting can limit one category, such as saved recordings, while leaving device identifiers or short-lived service logs necessary for operation.
What Google Home and Nest say they collect
Google’s Home and Nest privacy materials list setup details such as device names, types, home address or postal code and room placement. They also describe sensor information, including motion, light, temperature, humidity, smoke and carbon-monoxide readings; audio or video and derived event information where permissions and settings allow; voice or touch interactions and device adjustments; and technical data such as model and serial identifiers, IP and MAC addresses, Wi-Fi status, nearby network devices, software versions and diagnostics.
Home history and deletion
Google states that the default auto-delete period for Home activity is 18 months. The available choices described by Google are 3 months, 18 months or 36 months. Google also says Home activity may be retained for up to 24 hours when Home history is turned off, for service, safety, security and feedback purposes. These settings and app labels can change, so check the current Google Home and account activity screens for your product and region.
Reviewing or deleting Home history controls account activity; it should not be interpreted as proof that no interaction was processed or that all technical metadata disappeared.
Rank #3
- [Multi-Protocol Hub with Matter Bridge] The Aqara Hub M200 is a versatile smart hub that supports multiple advanced features, acting as a Matter Controller, Thread Border Router, and Matter Bridge. It integrates third-party devices into the Aqara Home app. With advanced Matter bridging functionality, it syncs Aqara-exclusive features with ecosystems like Home Assistant, Apple HomeKit, Alexa, and Google Home for seamless integration. Supports up to 40 Aqara Zigbee devices and 40 Thread devices.
- [Smart IR Blaster with Feedback and Learning] The 360°IR blaster not only sends commands but also provides accurate status updates by detecting traditional remote use. It connects IR air conditioning units to Matter, functioning as an AC thermostat when paired with an Aqara Temperature and Humidity Sensor. (Note: Only one AC device can be exposed to Matter. Functionality may vary based on the Matter integration app. For Apple Home exposure, use Matter integration instead of HomeKit.)
- [Wired & Wireless Connectivity with PoE Support] Enjoy flexible setup with dual-band Wi-Fi (2.4/5 GHz) using advanced WPA3 security, and Power over Ethernet (PoE), making the M200 a versatile PoE Ethernet Smart Home Hub. The USB-C port supports mini-UPS or power bank connections for uninterrupted operation, ensuring your energy-saving and security automations stay online. (*2A USB power adapter is not included. )
- [Home Automation and Alarm System] Works with all Aqara devices to create a comprehensive, smart home automation system. The Aqara Hub M200 is equipped with a built-in speaker that can be used in a variety of ways: security alerts, doorbell, alarm clock, and custom audio messages. (** 𝐍𝐨𝐭 𝐭𝐡𝐢𝐫𝐝-𝐩𝐚𝐫𝐭𝐲 𝐙𝐢𝐠𝐛𝐞𝐞 𝐝𝐞𝐯𝐢𝐜𝐞𝐬)
- [Local Automation for Reliable Performance] Supports local execution of automations for Zigbee and Matter devices, ensuring smooth operation even without Wi-Fi or cloud access. Enjoy millisecond response times for a more stable and reliable smart home experience. (Some automation, such as cloud push notifications, will still require the cloud connection to be executed.)
Advertising separation
Google says it keeps video footage, audio recordings and home-environment sensor readings separate from advertising and does not use that data for ad personalisation. Google separately explains that voice-interaction text may inform interests for ad personalisation in some circumstances. This is Google’s stated policy, not an independent audit, and it does not automatically cover every third-party accessory app linked to Google Home.
What Alexa and Echo can see and store
Amazon’s Alexa help documentation separates smart-home device status and usage history from information such as device type, device name and voice requests concerning those devices. The Alexa app provides controls to delete smart-home history, with automatic-deletion choices of 3 or 18 months documented in Amazon’s help material. Voice history can be reviewed and deleted through Alexa privacy controls, although the available choices can vary by device, account and region.
Physical microphone control
Echo hardware includes a microphone-off button that removes power to the microphone and shows a red light. Use the control on the exact model when you need a physical break from microphone capture; confirm that the red indicator is present before discussing something sensitive. A microphone switch does not disable cameras, other sensors or already stored account data.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →A feature that changed in 2025
The Associated Press reported on March 19, 2025, that Amazon would end the “Do Not Send Voice Recordings” setting beginning March 28, 2025, for a limited set of devices and US English customers. That report is a reminder that privacy controls can be discontinued. Do not assume every Alexa device had that option or that an old instruction still matches the current app.
How Apple Home and HomeKit handle data
Apple’s security documentation describes HomeKit commands as end-to-end encrypted and authenticated from a user’s device to the home hub, then forwarded to accessories through HomeKit Accessory Protocol or Matter. Apple’s privacy materials say Home data is encrypted and stored in a way Apple cannot read.
For HomeKit Secure Video, Apple describes camera analysis on devices in the home and end-to-end encrypted transmission to iCloud. These statements apply to the stated HomeKit features. They should not be generalized to every third-party accessory app, camera subscription or service linked to Apple Home.
Rank #4
- 💡 EASIEST WAY TO GET STARTED WITH HOME ASSISTANT - With Home Assistant already installed, it only requires plugging the included power supply and Ethernet cable to get started.
- ✅ OFFICIAL - This official Home Assistant hardware is built and supported by Nabu Casa, the team driving the development of Home Assistant.
- 🏡 DESIGNED FOR THE HOME - The small, fanless, and silent design packs a quad-core processor, 32GB of storage, and 4GB of RAM.
- 📱 ONE HUB TO CONTROL THE WHOLE HOME - Cut down hub and app clutter and control your whole home from Home Assistant Green.
- 🤖 AUTOMATE EVERYTHING - Make all the devices in your home work in harmony - have your lights dim when you start watching a movie, or turn off your heat when you’re away from home.
What a local-control platform changes
Home Assistant states: “Home Assistant runs on your own hardware in your home, and your data is stored locally.” Its platform can communicate directly with supported devices on the local network. Its FAQ identifies Zigbee, Z-Wave, Matter, Thread and ESPHome as local protocols that do not need internet connectivity. Optional cloud services provide only the functions a user enables, according to Home Assistant.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsA hub such as Home Assistant Green is an example of hardware designed to run that platform at home. Keeping the hub locally does not prove that every connected device, mobile notification or vendor integration stays local.
Matter and local operation
Home Assistant’s Matter documentation says Matter devices support local control without internet or cloud services. Some manufacturers may still require an account to enable Matter support for a particular product. Matter is therefore an interoperability and local-control option, not a guarantee that setup, updates, remote access or every vendor feature is cloud-free. The Connectivity Standards Alliance identifies security and privacy as Matter design tenets, but an individual product’s implementation and companion services still matter.
The security work moves to you
With self-hosting, you become responsible for the hub’s account security, updates, backups, integrations and remote access. Home Assistant recommends unique strong passwords, multi-factor authentication, limited administrator rights, staying current with monthly releases and using a secure remote-access method instead of exposing the instance directly to the internet. Its documentation also notes that a secrets file is not encrypted, so anyone who can read that file may obtain the stored values.
Platform comparison
| Platform | Data categories described | Processing and storage | History and deletion | Physical controls | Offline and cloud considerations | Security responsibility |
|---|---|---|---|---|---|---|
| Google Home and Nest | Home and room setup, device state and interactions, sensor readings, audio/video and events where enabled, technical identifiers and diagnostics | Wake-word detection is distinguished from sending detected interactions for service processing; account activity can retain text or other records | Home auto-delete choices described as 3, 18 or 36 months; up to 24 hours of Home activity may be kept when history is off | Depends on the exact speaker, display or camera model; verify the product’s controls | Remote features and linked accessories can involve Google or third-party clouds | Google manages account controls; the owner must secure the account, network and linked services |
| Alexa and Echo | Device status and usage, device names and types, voice requests, voice history and technical account data | Alexa processes detected interactions through its service; retention choices vary | Smart-home history auto-delete choices of 3 or 18 months are documented; voice history can be reviewed and deleted | Echo microphone-off button cuts microphone power and shows red | Cloud processing supports voice, remote control and integrations; device behavior varies | Amazon provides privacy controls; the owner must manage account sharing, skills and network security |
| Apple Home and HomeKit | Home commands, accessory state and camera data for supported HomeKit features | Apple describes end-to-end encrypted HomeKit commands and on-device HomeKit Secure Video analysis with encrypted iCloud transmission | Specific retention controls depend on the Home, iCloud and accessory feature; not stated uniformly for every device | Depends on the accessory; inspect each camera, microphone or sensor | Local hub communication is part of the design, while iCloud, remote access and third-party apps can add cloud dependencies | Apple operates account and encryption infrastructure; the owner secures devices, Apple ID and accessories |
| Home Assistant and other local-control setups | Data selected by the owner, plus whatever an enabled integration or optional cloud service collects | Runs on owner hardware; supported Zigbee, Z-Wave, Matter, Thread and ESPHome devices can communicate locally | Retention is configured by the owner and by any enabled integration; no single vendor-wide period | Depends on each radio, camera, microphone and accessory | Core automations can work without internet for supported devices; accounts, updates, notifications and remote access may still need services | Owner handles passwords, MFA, updates, backups, administrator rights and safe remote access |
How to reduce collection on a system you already own
- Inventory every data source. List the hub, speakers, displays, cameras, locks, thermostats, sensors, mobile apps, vendor accounts and subscriptions. Mark which devices have microphones, cameras or occupancy sensors, and note who is an account member.
- Review voice and smart-home histories separately. In Google’s account activity and Home controls, inspect voice/audio activity and Home activity as different categories. In Alexa’s privacy controls, inspect voice history separately from smart-home device history. Delete old entries and select the shortest auto-delete period that still meets your needs. Deletion of a history view does not promise removal of every identifier or short-lived processing record.
- Disable optional retention and improvement features. Turn off voice or audio saving, human review or improvement programs when you do not want those uses. Read the confirmation text: a service may still process an interaction briefly to answer it, protect the service or investigate abuse.
- Use physical sensor controls. Press the microphone-off control on an Echo when appropriate and confirm its red indicator. For cameras and other products, use the exact model’s hardware shutter, privacy switch or power control; do not assume a software toggle cuts power to a sensor.
- Audit integrations and people. Remove unused skills, Matter or manufacturer links, automation services, shared homes and former household members. Revoke permissions that provide camera streams, locks, location, contacts or presence data unless they are still needed.
- Harden accounts. Use a unique password for each major account, enable multi-factor authentication, review logged-in devices and recovery methods, and avoid giving administrator rights to people who only need everyday control.
- Update the whole chain. Install hub, speaker, camera, router and accessory firmware updates. A current hub cannot protect an abandoned camera or an outdated Wi-Fi router.
- Check network exposure. Put untrusted or low-cost devices on an appropriate guest or IoT network when your router supports it. Never expose a self-hosted hub directly to the public internet; use a documented secure remote-access method.
- Test an outage. Disconnect the internet briefly and check which lights, locks, routines and notifications still work. Record the functions that fail, because those failures identify your real cloud dependencies.
How to choose a more private hub
Compare systems by data category and operation rather than by a single privacy badge. Ask these questions before buying or migrating:
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware match- Which functions work on the local network when the internet is down?
- Does the device send raw audio, transcripts, event labels, sensor readings or only commands?
- Where are recordings and derived events stored, and who can access them?
- What are the default retention periods, shortest auto-delete choices and deletion limits?
- Can the microphone or camera be disconnected by hardware?
- Is an account required for setup, Matter activation, firmware updates or remote control?
- Which third parties receive data through skills, integrations, push notifications or subscriptions?
- How are remote access, multi-factor authentication, backups and security updates handled?
- What happens if the vendor discontinues a setting, cloud service or device support?
A local-control design is attractive when offline operation and minimizing routine cloud transfer are priorities. A managed cloud platform may be easier to maintain and provide better remote access. The right choice depends on which responsibility you prefer: sharing more operational data with a provider, or maintaining more security yourself.
Best Value
- EASIEST WAY TO GET STARTED WITH HOME ASSISTANT: With Home Assistant already installed, it only requires plugging the included power supply and Ethernet cable to get started
- DESIGNED FOR THE HOME: The small, fanless, and silent design packs a quad-core processor, 32GB of storage, and 4GB of RAM
- ONE HUB TO CONTROL YOUR WHOLE HOME: Simplify your smart home with HA70. Built with official Home Assistant OS and a professional Zigbee coordinator, it brings local control, powerful automation, and seamless device management into one compact hub
- AUTOMATE EVERYTHING: Make all the devices in your home work in harmony - have your lights dim when you start watching a movie, or turn off your heat when you're away from home
- YOUR HOME, YOUR DATA: Your home's data will be kept in the home on your HomeAssistant. You can easily view, share, and export that data anywhere you want
Common privacy mistakes and fixes
“The microphone is always recording everything.”
Wake-word detection and cloud upload are different stages. Check whether the product processes wake words locally, what audio is sent after activation and whether recordings or transcripts are saved.
“I turned off history, so nothing is collected.”
History controls normally address account retention, not every service operation. Google says Home activity can remain for up to 24 hours with Home history off, and device identifiers, diagnostics or short-lived processing may still be needed.
“Encryption means the vendor cannot see anything.”
End-to-end encryption can protect the stated content path, but it does not establish that all metadata is inaccessible or that every linked accessory uses the same architecture. Read the scope of the feature, not just the word “encrypted.”
Free tools Windows power users keep installed
One-click scans. No signup required.
“Local means completely offline.”
Local control applies only to supported devices and functions. Account setup, firmware updates, remote access, push notifications and manufacturer-specific features may still depend on the internet.
“A privacy setting will always be available.”
Amazon’s reported 2025 retirement of a “Do Not Send Voice Recordings” option shows why settings should be checked periodically. Keep a current inventory and revisit controls after app, firmware or policy changes.
A practical privacy review schedule
- Monthly: install updates, review new integrations and check account sign-ins.
- Quarterly: delete old voice and device histories, remove former household members and test an internet outage.
- After a move or remodel: rename rooms and devices carefully, remove devices left behind and reset hardware before giving it away.
- After adding a camera, lock or sensor: read that accessory’s privacy and subscription settings separately from the hub’s policy.
- After a policy or app change: confirm retention choices, physical sensor indicators and remote-access behavior again.
The Bottom Line
Protecting smart-home data means managing each data flow: minimize saved histories, use physical sensor controls, remove unnecessary integrations, secure accounts and updates, and verify which automations remain local. No single hub setting covers every device, cloud service or metadata record.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →
