Google Continues Data Collection from Discontinued Nest Thermostats

Google is still collecting detailed sensor data from older Nest Learning Thermostats, even after disabling remote control and ending support for these devices. Security researcher Cody Kociemba discovered that first- and second-generation models continue to transmit information about temperature changes, motion, and ambient light to Google through a one-way data stream. Kociemba made the discovery while participating in a bounty program created by FULU, a right-to-repair advocacy organization cofounded by electronics repair technician and YouTuber Louis Rossmann. FULU challenged developers to find a solution to restore smart functionality to Nest devices no longer supported by Google, and Kociemba’s open-source No Longer Evil project achieved this. However, after cloning Google’s API to create custom software, Kociemba began receiving a trove of logs from customer devices, which he subsequently turned off. ‘On these devices, while they [Google] turned off access to remotely control them, they did leave in the ability for the devices to upload logs. And the logs are pretty extensive,’ Kociemba told The Verge. He noted that the connection was not severed along with the remote functionality, leaving a one-way data stream. This discovery highlights the ongoing data collection by Google from discontinued devices and raises concerns about user privacy and data security.