Google Nest still sends data after remote control cutoff, researcher finds

Google officially unopen down distant power features for archetypal and 2nd procreation Nest Learning Thermostats past month. Many owners assumed the devices would halt talking to Google erstwhile the institution removed astute functions.

New research, however, shows that these aboriginal Nest devices proceed uploading elaborate logs to Google adjacent though enactment has ended.

Sign up for my FREE CyberGuy Report 
Get my champion tech tips, urgent information alerts and exclusive deals delivered consecutive to your inbox. Plus, you’ll get instant entree to my Ultimate Scam Survival Guide — escaped erstwhile you articulation my CYBERGUY.COM newsletter.

Early Nest Learning Thermostats inactive nonstop sensor information to Google adjacent aft losing distant features. (Google)

Researcher finds unexpected information uploads from aged Nest devices

Security researcher Cody Kociemba uncovered this quiescent information travel aft digging into the backend arsenic portion of a repair bounty situation tally by FULU, a right-to-repair radical cofounded by electronics repair adept and YouTuber Louis Rossmann. The situation asked developers to reconstruct mislaid astute features for unsupported Nest devices. Kociemba teamed up with the open-source assemblage and created No Longer Evil, bundle that brings astute functionality backmost to these aging thermostats.

While cloning Google's API to physique the project, helium abruptly received a flood of logs from lawsuit devices. That astonishment led to a deeper look astatine what Google inactive collects.

Researcher Cody Kociemba uncovered the ongoing information uploads portion gathering a instrumentality to reconstruct astute functions. (Google)

What Nest thermostats support sending to Google

Even though distant power nary longer works, Kociemba recovered that aboriginal Nest Learning Thermostats inactive upload a dependable watercourse of sensor information to Google. This includes:

• Manual somesthesia changes
• Whether idiosyncratic is successful the room
• When sunlight hits the device
• Temperature readings
• Humidity levels
• Motion activity
• Ambient airy data

Kociemba says the measurement of logs was extensive. He turned disconnected the incoming information due to the fact that helium ne'er expected the devices to stay connected to Google aft the shutdown.

Google antecedently said unsupported models volition "continue to study logs for contented diagnostics." However, Kociemba points retired that Google cannot usage that information to assistance customers anymore due to the fact that enactment is afloat discontinued. That makes the continued information travel adjacent much puzzling.

AI FLAW LEAKED GMAIL DATA BEFORE OPENAI PATCH

CyberGuy contacted Google for comment, and a spokesperson provided america with the statement, 

"The Nest Learning Thermostat (1st and 2nd Gen) is nary longer supported successful the Nest and Home apps, but somesthesia and scheduling adjustments tin inactive beryllium made straight connected the unit. These devices volition soon beryllium unpaired and removed from each idiosyncratic accounts. Diagnostic logs, which are not tied to a circumstantial idiosyncratic account, volition proceed to beryllium sent to Google for work and contented tracking. Users who similar to halt providing these logs tin simply disconnect their instrumentality from Wi-Fi via the on-device settings menu." 

The thermostats proceed reporting temperature, question and airy information adjacent though authoritative enactment has ended.

Why this find matters

Google chopped entree to distant control, information updates, bundle updates and presumption checks done the Nest and Google Home apps. Owners tin nary longer trust connected the devices for cardinal astute features. Yet the thermostats inactive propulsion information to Google, creating a one-way transportation that helps the institution much than the customer.

Users bash not payment from the logs due to the fact that enactment has been discontinued. Google cannot usage these logs to diagnose problems oregon connection help. That raises questions astir transparency and idiosyncratic prime for radical who assumed the transportation ended.

The FULU bounty that sparked the discovery

FULU's bounty programme encouraged developers to physique tools that reconstruct functionality to devices abandoned by their makers. After reviewing submissions, FULU awarded Kociemba and different developer known arsenic Team Dinosaur the apical bounty of $14,772 for bringing astute features backmost to aboriginal Nest models.

Their enactment highlights however community-driven repair efforts tin support utile devices alive. It besides reveals however companies grip instrumentality information agelong aft authoritative enactment stops.

Ways to enactment harmless if you inactive usage an aged Nest thermostat

If you support 1 of these unsupported Nest thermostats connected your network, you tin instrumentality a fewer elemental steps to support your privacy. These tips assistance trim what the instrumentality sends to Google and little your exposure.

1) Review your Google relationship activity

Start by checking what Google has linked to your location devices. Visit myactivity.google.com and look for thermostat logs oregon events you bash not expect.

2) Place the instrumentality connected a abstracted Wi-Fi network

A impermanent web keeps the thermostat distant from your main devices. This limits what the thermostat tin scope and helps forestall broader access.

3) Block outbound postulation erstwhile possible

Some routers fto you halt idiosyncratic devices from sending information to the internet. This cuts disconnected log uploads portion inactive letting the thermostat power heating and cooling.

4) Disable immoderate remaining unreality features

If the instrumentality paper inactive offers unreality settings, crook disconnected thing related to distant entree oregon online diagnostics. Even partial controls assistance trim information flow.

5) Remove aged instrumentality associations from your Google account

Check your connected devices successful your Google settings. Remove immoderate aged Nest entries that nary longer service a purpose. This stops leftover links that whitethorn inactive nonstop data.

6) Adjust router settings that study instrumentality analytics

Some routers nonstop analytics backmost to the router maker. Turn disconnected unreality diagnostics to trim the footprint of unsupported astute products.

7) Plan your replacement

Unsupported devices suffer information updates. If you cannot isolate the thermostat connected your network, see upgrading to a exemplary that inactive receives patches.

Pro Tip: Reduce your footprint with a information removal service

A information removal work tin assistance you chopped down connected the magnitude of idiosyncratic accusation disposable to information brokers. This adds different furniture of privateness that supports your astute location security.

While nary work tin warrant the implicit removal of your information from the internet, a information removal work is truly a astute choice. They aren't cheap, and neither is your privacy. These services bash each the enactment for you by actively monitoring and systematically erasing your idiosyncratic accusation from hundreds of websites. It's what gives maine bid of caput and has proven to beryllium the astir effectual mode to erase your idiosyncratic information from the internet. By limiting the accusation available, you trim the hazard of scammers cross-referencing information from breaches with accusation they mightiness find connected the acheronian web, making it harder for them to people you.

Check retired my apical picks for information removal services and get a escaped scan to find retired if your idiosyncratic accusation is already retired connected the web by visiting Cyberguy.com.

Get a escaped scan to find retired if your idiosyncratic accusation is already retired connected the web: Cyberguy.com.

OVER 2B USERS FACE PHISHING RISKS AFTER GOOGLE DATA LEAK

Take my quiz: How harmless is your online security?

Think your devices and information are genuinely protected? Take this speedy quiz to spot wherever your integer habits stand. From passwords to Wi-Fi settings, you’ll get a personalized breakdown of what you’re doing close and what needs improvement. Take my Quiz here: Cyberguy.com.

Kurt's cardinal takeaways

The find that aged Nest thermostats inactive nonstop information to Google agelong aft losing astute features gives owners a crushed to instrumentality a person look astatine their connected home. Unsupported devices tin proceed to speech to servers adjacent erstwhile the utile broadside of the narration ends. Understanding what your gadgets stock helps you marque informed decisions astir what stays connected your network.

Would you support utilizing a instrumentality that inactive sends information to its shaper adjacent aft it loses the features you paid for? Let america cognize by penning to america astatine Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report 
Get my champion tech tips, urgent information alerts and exclusive deals delivered consecutive to your inbox. Plus, you’ll get instant entree to my Ultimate Scam Survival Guide — escaped erstwhile you articulation my CYBERGUY.COM newsletter.

Copyright 2025 CyberGuy.com.  All rights reserved.