Google’s first and second generation Nest Learning Thermostats, which were officially discontinued, continue to send data to Google servers even after their smart features have been disabled. This has sparked serious privacy concerns among users who assumed that the devices would stop transmitting data once they lost their remote control capabilities. Security researcher Cody Kociemba, while working on a right-to-repair challenge, discovered that these early Nest thermostats are still uploading a steady stream of sensor data to Google, even though support has been fully discontinued.
The issue arose after Google shut down remote control features for the older models. Many users believed that once the smart functions were removed, the devices would no longer connect to the company’s servers. However, Kociemba’s research showed that these outdated devices continue to send logs, which raises questions about transparency and user choice. Google’s initial statement indicated that diagnostic logs would still be sent for service and issue tracking, but now the company can no longer use this data to help users due to the discontinued support.
The discovery underscores the need for users to be more aware of how their connected devices interact with the internet and the data they share. Users can take proactive steps to protect their privacy by isolating old devices on their home network, turning off unnecessary cloud features, and removing outdated device links. These actions help reduce the risk of data exposure and enhance overall home security in an increasingly connected world.