Google Home

Is Google Home safe?

Google Home is safe in the sense that matters most for a smart home: the devices are hard to break into and get patched for years. Google commits to at least five years of security updates for Nest devices, and we found no breach of Google Home data. Privacy is the trade-off. Everything runs through your Google account, the app's App Store label lists data used for third-party advertising, and Texas included Nest Hub Max face recognition in a case Google settled for $1.375 billion in 2025. We score Google Home 62/100, ahead of Ring at 57 and behind SmartThings at 68.

Does Google use smart home data for ads?

Not the footage, according to Google, but the account around it is part of Google's ad system. Google's Nest privacy commitments say video footage, audio recordings and home sensor readings, such as temperature, are kept separate from advertising. The same page says the text of your voice interactions may be used to inform your ad interests.

Apple's privacy label for the Home app goes further. It lists search history and browsing history as data used for third-party advertising and linked to your identity, plus physical address, email and user ID for Google's own marketing. For analytics and app features, it lists precise location, contacts, audio data, photos and videos and payment information, all linked to you. That is a longer list than SmartThings or Tapo declare, though both of those apps' labels understate what their own privacy policies describe.

How secure are Nest cameras and speakers?

Better than most of the market. Google says all Nest devices released since 2019 use verified boot, so a device only runs software Google signed, and they are checked against third-party security standards. Nest is covered by Google's vulnerability reward program. In 2022 Google paid researcher Matt Kunze $107,500 for flaws in a Google Home speaker that let someone within Wi-Fi range add a hidden account, then send commands and listen through the microphone over the internet. Google fixed them before he published.

The gaps are on the account side. Camera clips are stored on Google's servers, and Google's commitments do not mention end-to-end encryptionEnd-to-end encryptionEncryption in which only the sender and the recipient can read a message. The company running the service cannot see its content.More in the glossary, so assume Google can technically read them. Two-step verificationTwo-factor authenticationSigning in with a second proof of identity on top of your password, such as a code from an app, a security key or a passkey.More in the glossary for your Google account is not required, and it is the main thing standing between a leaked password and your cameras.

Gemini for Home and the cameras

Since October 2025, Gemini for Home has been replacing Google Assistant on Nest speakers and displays. It also changes what the cameras do. With a Google Home Premium subscription, Gemini writes descriptions of what happens in your camera footage, sends summary alerts and lets you search your video history in plain language ("did something eat my plants?"). That is useful, and it also means an AI model is processing what your cameras see. You opt in by subscribing, so you can keep the older, simpler alerts by not doing so.

Can police get Google Nest footage?

With a warrant, yes, as with any cloud service. Google's policy also lets it hand over data without one when it believes this could prevent death or serious injury. When this came up in July 2022, Google told 9to5Google it had never used that emergency power but wanted to keep it, and that it might not notify you until the emergency had passed. Google Home has no tool like Ring's Community Requests that lets police ask owners for clips through the app.

What did the Texas case say about Nest Hub Max?

In October 2022 Texas sued Google under its biometric privacy law. The suit said Google Photos, Google Assistant voiceprints and the Nest Hub Max, whose camera recognises faces, captured biometric data from people who never agreed, including children who "may be drawn by curiosity to stand in front of the Nest Hub Max". Google said Face Match and Voice Match are off by default. In 2025 Google settled this case together with Texas's location and incognito cases for $1.375 billion, without admitting wrongdoing.

A separate private class action, Kumandan v. Google, ended with a $68 million settlement approved in October 2026 over claims that Assistant devices recorded people without the wake phrase and passed recordings to review contractors. Google denied wrongdoing there too.

How to set up Google Home more privately

1. Turn on two-step verificationTwo-factor authenticationSigning in with a second proof of identity on top of your password, such as a code from an app, a security key or a passkey.More in the glossary or a passkeyPasskeyA way to sign in without a password. Your device holds a key tied to one website or app and unlocks it with your fingerprint, face or PIN.More in the glossary for your Google account.
2. Leave Face Match and Voice Match off unless everyone in the home has agreed to them.
3. Turn on auto-delete for Web & App Activity, where Google keeps saved voice and audio activity, and pick the shortest period it offers.
4. Shorten camera event history to what you need, and switch cameras off when you are home.
5. Check who is a member of your home in the app and remove old flatmates or ex-partners.

How we scored it

Scams and harmful content (78) is Google Home's strongest factor, since there is no public feed or chat. Security (70) and transparency and control (70) come next, thanks to long update support, verified boot, the bug bounty and clear deletion tools. Privacy (45) is its weakest: the app links a broad set of data to your Google account and uses search and browsing history for ads. The regulatory record (48) reflects the Texas settlement that named Nest Hub Max and Assistant voiceprints.