HomeKit basic homekit privacy question in regards to device manufacturers

[phillyman]

Hi All,

I read the basic homekit guide which was very helpful. Homekit to me has always been a bit of a mystery and not well explained.
But here we go....

If I buy a lock or lightbulb will that manufacturer have usage information or even through their app "access"? Let me explain. I like the idea of home automation but I just would like it locally. Have convenient "virtual keys" that I can activate/deactivate (only at home is fine) maybe restrict to certain days. Once door unlocks turn on certain lights. Maybe based on the color of a light know that someone is home. I do not see the need to access ANY of this from the road. I know I'm naive but I "trust" Apple a bit more and if they put their seal of approval on something that is helpful. BUT I'm less worried about "hackers" directly targeting me than some companies and their very cavalier attitude towards privacy and security. No one at Yale nor Philips needs access to any of my usage data or backend. I'm fine with Apple needing some limited access but again minimal. For example I use apple pay since the Credit card company will have access to my use anyway and I trust apple in facilitating my transaction.


I'm not going down the deep end and thinking that X employee can suddenly control my house BUT I'm trying to be a bit cautious. There is a reason there is no alexa or google assistant in my home. The creepy audio clips to improve service or we will now use your wifi connection to create an adhoc wifi network is just a bridge too far for me.

Thank you for your insights as to how homekit handles it all. IF I understood it correctly homekit is an Apple standard that encrypts traffic to and from me to the manufacturer of the device and the interoperability through apple devices/hub (apple tv) within a house between devices. Sadly NOT all homekit traffic/data is handled by apple but sent to the manufacturers to actually execute my request.

If that is correct each manufacturer might have usage data PLUS personally identifiable information. My lightbulb company does not need to know when and how I use my lightbulbs (or store it for someone else to steal/use). Nor does my lock need to share who has access to my house.

Again thanks for helping me better understand who has access to what when it comes to my homekit data.

Philly

 

[cynics]

So HAP is HomeKit Accessory Protocol. Its the language the accessories and hub use to communicate. The accessories still utilize the existing Wifi (unless its a BT accessory) but they speak their own language.

It rare cases there is no app, Logitech camera I have for example, it only uses HomeKit app.. Most other accessories will have an app. The app will only need to be used for firmware updates (unless HomeKit supports it) and potentially for some specific accessory control that HomeKit doesn't cover.

The Home app works with those accessories outside of your home. I go weeks using devices via the Home app without ever open their OEM app.

If you are a bit paranoid about those 3rd party apps then revoke their permissions once you got the accessories firmware updated. The accessory is completely isolated from it.

The Home app does geo fencing, works remotely, there is a watch app, Mac app, iOS app. Siri works remotely from any device. Doesn't make sense to use the OEM's app.

 

[Itinj24]

Another thing to consider is “HomeKit Enabled Routers.” Currently there are only two manufacturers that support it, Eero and Linksys. It has three modes:

Restrict to Home- Cuts out any access to third parties and can only communicate with HomeKit
Automatic- Only allows third party access when a firmware update is available allowing the third party to push the update.
No Restriction- Flood gates are open to anyone and anything.

All this can be tailored to a per accessory/manufacturer basis but I noticed that some manufacturers don’t play well with this. Wemo and Ecobee. For the Wemo, if Restrict to Home is selected and there’s a power outage or network reboot, they won’t auto connect back to the network. Ecobee gave me a hard time with initial connection unless I’ve selected No Restriction.

 

[phillyman]

thank you for that information. It clarifies what I needed to know and reassured me
Philly
I like the homekit enabled routers. Especially the restrict to home or automatic. Thank you for highlighting that. I'm surprised they do not make that a big selling point.

 

[phillyman]

So HAP is HomeKit Accessory Protocol. Its the language the accessories and hub use to communicate. The accessories still utilize the existing Wifi (unless its a BT accessory) but they speak their own language.

It rare cases there is no app, Logitech camera I have for example, it only uses HomeKit app.. Most other accessories will have an app. The app will only need to be used for firmware updates (unless HomeKit supports it) and potentially for some specific accessory control that HomeKit doesn't cover.

The Home app works with those accessories outside of your home. I go weeks using devices via the Home app without ever open their OEM app.

If you are a bit paranoid about those 3rd party apps then revoke their permissions once you got the accessories firmware updated. The accessory is completely isolated from it.

The Home app does geo fencing, works remotely, there is a watch app, Mac app, iOS app. Siri works remotely from any device. Doesn't make sense to use the OEM's app.

Excellent explanation. I thought home was just to facilitate and not run. I now feel comfortable exploring the home automation field in more detail.
P