Smart home devices can make daily life easier, but cameras, microphones, televisions and connected appliances also create accounts, permissions and data-sharing choices that are easy to overlook. This reusable UK smart home privacy checklist explains what to review, device by device, before acting, after sharing access, when moving home and during a regular six-month check.
Overview
Privacy is not a single setting. It is the combined result of your account security, device permissions, recording choices, cloud storage, network setup and the people who can access the device. Menus differ between manufacturers and may change after an app update, so use the labels in this guide as prompts rather than exact instructions.
Start by making a simple list of every connected product in the home. Include video doorbells, indoor and outdoor cameras, smart speakers, smart displays, televisions, streaming devices, robot vacuums, smart thermostats, connected heating controls and appliances operated through a mobile app. Record the account used for each device and whether it depends on a subscription or cloud service.
For each product, work through these basic checks:
- Use a unique, strong password for the manufacturer account. Do not reuse the password for email, banking or other important services.
- Turn on two-factor authentication where it is offered, then make sure recovery email addresses and phone numbers are current.
- Install device firmware and app updates from the manufacturer’s normal update process.
- Review who has access, including family members, installers, previous owners and shared household accounts.
- Check whether recordings, voice clips, images or usage data are stored locally, in the cloud or in both places.
- Read the current privacy, retention and account-deletion information before relying on a device for sensitive areas of the home.
There is no need to disable every connected feature. The practical aim is to make an informed choice about what each device can see, hear, record and share.
Checklist by scenario
Smart cameras and video doorbells
- Change the default password and enable two-factor authentication on the main account.
- Position the camera so it captures the area you need without unnecessarily viewing neighbours’ property, shared access routes or private rooms.
- Review motion zones, privacy zones and recording schedules. Disable audio recording if you do not need it.
- Check cloud retention and automatic deletion options. If the service offers different retention periods, choose the shortest period that meets your needs.
- Review notifications and sharing permissions. Remove anyone who no longer needs live view, recordings or device administration.
- Check whether local storage is available and understand what happens if the camera loses its internet connection.
- Before selling or returning the device, remove it from the account, delete stored recordings where appropriate and perform a factory reset.
Smart speakers and displays
- Review microphone controls, voice recording history and any option to delete saved voice interactions.
- Use a physical microphone switch or mute control when you want a clear break from voice detection.
- Check voice purchasing, personal results, calling and household announcements. Disable features that are not useful for your household.
- Review linked services, skills, routines and third-party accounts. Remove connections you no longer recognise or use.
- Set up separate household profiles where available, particularly if calendars, contacts or personal results are connected.
Smart TVs and streaming devices
- Install software updates and use a secure account password for the TV or streaming platform.
- Review advertising, viewing-history, voice-control and personalised-content settings. Choose the least intrusive option that still provides the features you want.
- Check camera and microphone permissions if the TV, remote or attached accessory supports them. Disable access when it is not required.
- Remove old streaming accounts, payment methods and user profiles before giving the TV away or moving it between homes.
- Review app permissions individually rather than accepting every request automatically.
Mobile-connected appliances and home controls
For robot vacuums, heating controls, air-quality monitors, smart plugs and lighting, check location access, household-member permissions and automation history. A robot vacuum may create maps; an indoor air-quality monitor may record room conditions; a heating app may store schedules and property information. Keep only the data and access needed for the feature you use.
If you are comparing connected heating or energy products, review the smart thermostat compatibility guide and consider how account access will be transferred if you move home.
What to double-check
Guest and family access
Shared access should be deliberate. Prefer individual accounts or household profiles over one password used by everyone, because individual access can usually be removed without changing the whole household setup. Check permissions after a cleaner, tradesperson, tenant, lodger or house guest has finished using the system.
Cloud retention and local storage
Do not assume that disabling a notification stops recording, or that deleting an app deletes account data. Look for separate controls for live view, recordings, voice history, device logs and account information. Where local storage is available, secure the memory card or hub and understand whether recordings are encrypted, automatically overwritten or accessible to other household accounts.
Network and account security
Use a current router password and keep the router’s firmware updated. Put older or less-trusted smart devices on a separate guest or IoT network if your router supports that arrangement, while checking that required controls still work. Do not expose cameras or hubs directly to the internet through unnecessary port forwarding.
For wider setup decisions, the smart home compatibility checker can help you understand which platform controls a device and where account access may be concentrated.
Common mistakes
- Keeping default credentials: Change them during setup, not later.
- Sharing the main account: Use guest or household access where the manufacturer supports it.
- Ignoring microphones: Check televisions, displays, remotes and appliances, not just smart speakers.
- Leaving old users connected: Remove former residents, installers and unused phones from the account.
- Assuming a factory reset is optional: Reset devices before resale, disposal, return or handover.
- Accepting every permission: A device should not automatically receive location, contacts, camera or microphone access unless its function requires it.
- Never checking updates: Enable automatic updates where appropriate, but still review products that no longer appear to receive support.
When to revisit
Run this checklist at least every six months and whenever a manufacturer changes its app, privacy controls, subscription or account terms. Recheck sooner after a firmware update, security alert, new household member, change of Wi-Fi router or new device installation.
Use a shorter review before sharing access, hosting guests, renting out a property, moving home or selling a device. Moving is especially important: remove devices from your account, delete recordings and personal profiles, cancel services you no longer need, and give the new occupant clear instructions for a clean setup rather than handing over your account.
For a practical six-month review, set aside one session and work through the device list room by room. Confirm passwords and two-factor authentication, inspect camera and microphone permissions, remove old users, check retention settings, install available updates and test account deletion or factory-reset instructions for products you plan to replace. Keep a note of each manufacturer’s current menu path and policy page so the next review is quicker. If you are building or expanding a connected home, also consider subscription-free options and the long-term account requirements before buying.