Most people set up a smart device once, accept whatever the app asked for, and never open the settings again. Two years later there are fifteen devices, three companion apps nobody remembers installing, and a vague unease about what is being recorded. A privacy audit fixes that without drama. It takes an afternoon, needs nothing more than a notepad or spreadsheet, and usually ends with a handful of switches turned off rather than a bin full of gadgets.

Start With an Honest Inventory

You cannot review what you have forgotten. Walk through each room and write down every device that connects to your network or a hub: cameras, speakers, TVs, plugs, bulbs, thermostats, robot vacuums, doorbells, baby monitors, even the fridge if it has a screen. Then open your router’s connected-device list and compare. The devices on the router that you cannot place are the first thing to investigate.

For each item, record four things: what it senses, where its data goes (a cloud account, a local hub, or nowhere), which app or account controls it, and who else has access. That last column is where surprises live. Old guest invitations, a former housemate’s login, and shared family accounts all linger.

Sort Devices by What They Can Capture

Not every device deserves the same scrutiny. A smart plug knows when it is switched on. A camera or microphone captures the inside of your home. Sorting by capability lets you spend your effort where it matters.

Device type	What it can capture	First thing to check
Cameras and doorbells	Video, audio, motion, visitor patterns	Cloud storage, sharing list, indoor use
Smart speakers and displays	Voice, wake-word activity, routines	Voice history retention, microphone mute
Smart TVs	Viewing habits, sometimes voice	Content recognition and ad personalization
Robot vacuums	Floor plans, sometimes camera images	Map storage, camera features
Thermostats and sensors	Occupancy and schedule patterns	Account sharing, data-sharing toggles
Plugs, bulbs, switches	Usage timing	Whether they need a cloud account at all

Go Through the Account Settings, Not Just the Device

Much of the real exposure lives in the vendor account rather than on the device itself. Log into each manufacturer’s app or web dashboard and look for the same few things. Check how long recordings or voice history are kept and whether you can shorten that or delete it. Look for toggles about using your data to improve services or personalize ads, which are often on by default. Review the list of people and third-party services connected to the account, and remove anything you do not recognize.

Also turn on two-factor authentication wherever it is offered. A strong, unique password protects the account that holds your camera footage far better than any device setting does. A password manager makes unique passwords painless.

Tighten the Physical and Network Layer

Some fixes have nothing to do with apps. Put indoor cameras where they do not face bedrooms or bathrooms, and consider a physical shutter or simply unplugging them when you are home. Use the hardware mute switch on speakers during sensitive conversations; a hardware switch is more trustworthy than a software one.

On the network side, keep devices on a separate network or VLAN from your laptops and phones where your router allows it. If a cheap bulb is ever compromised, that separation limits what it can reach. Disable features you do not use, such as remote access on devices that you only ever control from home, and universal plug-and-play on the router if you have no need for it.

A Worked Example

Imagine a household with two cameras, a smart speaker, a TV, a robot vacuum, and eight bulbs and plugs. The audit turns up an old camera still linked to a previous tenant’s email, a vacuum app that has stored a map of the whole flat, and a TV with viewing-data sharing enabled. The fixes are small: remove the stale account, delete the stored map and disable cloud mapping if the vacuum works without it, and switch off the TV’s data collection. The two cameras are moved to cover only the front door and the hallway entrance, and the family agrees to unplug the hallway one when everyone is home. Nothing was thrown away, and the exposure dropped noticeably.

Decide What to Keep, Limit, or Retire

After the review, put each device into one of three groups. Keep means it does a useful job and its settings are acceptable. Limit means it is useful but needs restrictions, such as a shorter retention period or no cloud features. Retire means the vendor no longer issues updates, the app is abandoned, or the privacy cost outweighs the benefit. Devices that no longer receive firmware updates are the strongest candidates for retirement, because they only get riskier with time.

Make It a Habit

An audit decays, because apps update and quietly reset preferences. Set a reminder every six months, and add a row to your inventory whenever a new device arrives.

Laws about data access, deletion rights, and recording other people (including visitors and neighbors) differ by country and region. If you rent out part of your home or have cameras that cover shared spaces, check the rules where you live.

Frequently Asked Questions

Do I need to remove every cloud-connected device? No. The goal is informed choices. Plenty of cloud-connected devices are fine once retention is limited, accounts are secured, and unnecessary sharing is turned off. Reserve removal for devices that are unsupported or collect more than they justify.

How do I find devices on my network I forgot about? Open your router’s admin page and read the list of connected clients. Cross-reference it with your inventory, and unplug suspicious devices one at a time to see which entry disappears.

Are local-only devices always more private? They remove the vendor cloud from the picture, which is a big gain, but they still need good network hygiene and updates. Local control reduces exposure; it does not replace basic security.

Should indoor cameras be on all the time? Usually not. Many people schedule them to record only when the home is empty, or unplug them when occupied. Choose a pattern that matches how you actually live.

What if a device has no privacy settings at all? Limit it by network separation, deny it any permissions it asks for on your phone, and consider replacing it with something that gives you control.

Next Step

Open a blank sheet right now and list just the cameras, speakers, and TV. Fill in who holds the account and how long data is kept. Those three rows will likely give you the biggest improvement for the least effort, and the rest of the inventory can follow later.