Google Nest Thermostats Continue Data Collection Despite Feature Shutdown
First and second-generation Nest Learning Thermostats continue sending detailed sensor data to Google despite the company officially ending remote control support last month, according to new research.
Key Findings
- Early Nest thermostats upload logs even after smart feature shutdown
- Data includes temperature, motion, humidity, and ambient light readings
- Google confirms diagnostic logs continue despite discontinued support
- Users can disconnect Wi-Fi to stop data transmission
Unexpected Data Discovery
Security researcher Cody Kociemba uncovered the ongoing data flow while working on a repair bounty challenge organized by FULU, a right-to-repair group co-founded by electronics expert Louis Rossmann. The project aimed to restore smart functionality to unsupported Nest devices.
While cloning Google’s API to build “No Longer Evil” software that brings back smart features, Kociemba unexpectedly received extensive logs from customer devices, revealing the continued data transmission.
What Data Nest Thermostats Still Send
Despite remote control being disabled, early Nest Learning Thermostats continue uploading:
- Manual temperature adjustments
- Room occupancy detection
- Sunlight exposure data
- Temperature and humidity readings
- Motion activity and ambient light levels
Google’s Official Response
“The Nest Learning Thermostat (1st and 2nd Gen) is no longer supported in the Nest and Home apps, but temperature and scheduling adjustments can still be made directly on the unit. These devices will soon be unpaired and removed from all user accounts. Diagnostic logs, which are not tied to a specific user account, will continue to be sent to Google for service and issue tracking. Users who prefer to stop providing these logs can simply disconnect their device from Wi-Fi via the on-device settings menu.”
Privacy Implications
The discovery raises concerns about transparency and user choice, particularly since Google cannot use this data to provide customer support for discontinued devices. The one-way data flow benefits the company without providing value to users who assumed the connection had ended.
FULU Bounty Program Success
The research emerged from FULU’s bounty program encouraging developers to restore functionality to abandoned devices. Kociemba and Team Dinosaur received the top bounty of $14,772 for successfully bringing smart features back to early Nest models, demonstrating how community efforts can extend device lifespans.
Protecting Your Privacy
If you own an unsupported Nest thermostat, consider these steps to limit data sharing:
- Review Google account activity at myactivity.google.com for unexpected thermostat logs
- Use a separate Wi-Fi network to isolate the device from your main network
- Block outbound traffic through router settings if available
- Disable cloud features in device settings
- Remove old device associations from your Google account
- Turn off router analytics that report device data
- Consider replacement for security-updated models
Key Takeaways
The findings highlight how unsupported smart devices may continue communicating with manufacturer servers long after losing useful functionality. Understanding what data your connected devices share helps make informed decisions about network security and privacy protection.
