Rules
Part of The electrification errors that cost time, not just money
Privacy mistakes people make while electrifying
Electrification mistakes privacy: the consent and account errors that accumulate during an electrification project, from default cloud settings to orphaned logins.
Privacy exposure in an electrified home is rarely the result of a decision. It accumulates through defaults accepted during setup, accounts created for a single feature, and consents signed while standing in a kitchen with a technician waiting. This article is a list of those accumulations and how to undo them.
What to take away
- Defaults are decisions, and installers usually accept them for you.
- One account per device is normal, and nobody closes them afterwards.
- Consent given at installation is rarely reviewed again.
- Selling or leaving the house transfers more than the hardware.
Mistake one: letting the installer configure the accounts
Technicians commission equipment quickly, and the fastest path is to accept every default and register the device under whatever credentials are convenient. That sometimes means the installer's own account, which leaves a third party with ongoing access to your equipment after they have left.
Ask at commissioning whose account the equipment is registered to, and change it to yours before final payment. Ask specifically whether any remote access remains enabled for the contractor.
Mistake two: accepting cloud reporting you never wanted
Most connected equipment ships with cloud reporting enabled. Some devices need it for their headline feature and some do not; the difference is rarely obvious at setup. Metering infrastructure is now widespread, with EIA reporting a long trend of smart meter deployments continuing to rise, and household devices have added a second, less regulated layer on top of it.
Work out which features you actually use, then disable reporting for the rest. Many devices function completely on a local network with cloud features switched off.
The awkward cases are devices where a genuinely useful feature depends on the cloud, such as remote alerts when a system faults while you are away. That is a real trade rather than a default to reject, and it is worth deciding deliberately rather than by whatever the setup wizard proposed.
Mistake three: never revisiting consent
Consent signed at installation covers a device and a set of terms as they stood that day. Terms change, companies are acquired, and features migrate behind accounts. Nobody sends a reminder.
A yearly review takes fifteen minutes:
- List every connected device in the house.
- For each, note the account it uses and who else has access.
- Check whether cloud features are enabled and whether you use them.
- Close accounts for devices you no longer own.
- Revoke any contractor or previous-occupant access still present.
Mistake four: forgetting the handover
Selling or letting a house transfers connected equipment with whatever accounts and history are attached. A thermostat still linked to a previous occupant's account is a common and avoidable situation, and it works in both directions.
| Moment | What to do |
|---|---|
| Buying a home | Factory reset every connected device before use |
| Selling a home | Remove devices from your accounts, then reset |
| End of a tenancy | Reset and confirm removal in writing |
| Replacing a device | Close the old account rather than abandoning it |
Research on the grid edge, where household equipment meets the distribution system, treats these interfaces as engineering rather than as consumer conveniences. The Department of Energy's work on grid-edge research and development for buildings covers that boundary, which is exactly where a household's data starts leaving the house.
For the underlying map of who collects what, see our piece on where privacy concerns appear; the wider set of avoidable errors sits in the mistakes that cost time.
Common questions
Can I use connected equipment without an account? Sometimes. Check before purchase, because retrofitting a preference is harder than choosing one.
Should I let the installer register the equipment? Only under your account. Ask what access they retain afterwards.
What if I already accepted everything? Review the settings now. Most can be changed later, and closing unused accounts is straightforward.
Does a factory reset remove my data from the company? It removes it from the device. Data already sent to a cloud service is governed by that company's retention terms.
