Google’s Data Collection: The Controversy Surrounding Downgraded Nest Thermostats

Google Collecting Data from Unsupported Nest Learning Thermostats Despite Remote Control Shutdown

Last month, Google discontinued remote control functionality for early Nest Learning Thermostats. However, security researcher Cody Kociemba discovered that these devices are still sending data to Google, including manual temperature changes, occupancy status, sunlight exposure, and more.

Kociemba created custom software by cloning Google’s API, which allowed him to access logs from these devices. Although Google disabled remote control, the thermostats can still upload logs. Kociemba mentioned that the logs contain extensive information.

Google also blocked users from checking device status using the Nest or Google Home app and disabled security and software updates for early Nest Learning Thermostats. Despite collecting logs for issue diagnostics, the data may no longer be beneficial.

Kociemba noted that Google cannot use the collected information to assist customers due to the discontinuation of support for these thermostats. The data includes technical details like HVAC error states.

Despite turning off remote control, Google continues to receive data from Nest Learning Thermostats, such as temperature, humidity, ambient light, and motion sensor readings. Kociemba expressed surprise at the ongoing data connection with Google.

Kociemba and Team Dinosaur received a bounty of $14,772 from FULU for reintroducing smart features to the unsupported thermostats.