Legal Items

Privacy Statement for Nest Products and Services

Note: If you use your Nest devices and services with a Google Account, then your data will be handled as described in the Google Privacy Policy and as explained in more detail in this Privacy FAQs Help Centre page. Please also read Google’s commitment to privacy in the home.

Policy active from 1 September 2023. Review previous policies here.

At Nest, we take your privacy seriously.

This Privacy Statement for Nest Products and services ('Privacy Statement') describes information that Nest Labs, Inc. and its subsidiaries and affiliates (collectively, 'Nest') collect, use, share and store, including personal information (i.e. information that personally identifies you, such as your name, email address or billing information, or other data that can be reasonably used to infer this information).

This document focuses on information related to the operation of Nest Products and services, including the Nest Learning Thermostat™, Nest Protect: Smoke + Carbon Monoxide™ Alarm, Nest Cam™, Dropcam™, Nest Hello™, Works with Nest™ and other products from Nest (collectively, 'Nest Products'). In this Privacy Statement, the expression 'Nest Products' also includes our web apps, mobile apps and subscription services as defined in our Terms of Service.

We provide additional details about how we collect and use information from our public websites in our Privacy policy for Nest websites.

Our pledge:

  1. We will be transparent about the different types of information that we collect and how we use them.
  2. We will ask your permission before sharing your personal information with third parties for purposes other than at your request or to provide Nest Products, and to do so only when we think they will provide you with a welcome additional service.
  3. We will use best-in-class data security tools to keep your data safe and protect the Nest Products from unauthorised access.

Your permission: Permission for data collection and processing. By using Nest Products, you agree to allow us to collect and process information as described in this Privacy Statement.

International data transfers. Your personal information may be collected, processed and stored by Nest or its service providers in the United States and other countries where our servers reside. Please be aware that the privacy protections and legal requirements, including the rights of authorities to access your personal information, in some of these countries may not be equivalent to those in your country. If you are using Nest Products in the European Economic Area or other regions with laws governing data collection and use that may differ from United States law, you agree to the transfer of your personal data to the United States and other countries where Nest operates. We have provided you with more information below as to how we protect your personal data when it is transferred internationally: How does Nest protect my personal information when it is transferred internationally?

What information does the Nest Learning Thermostat collect?

The Nest Learning Thermostat collects:

  • Setup information that you provide
  • Environmental data from the Nest Learning Thermostat’s sensors
  • Direct adjustments to the device, including temperature or settings
  • Heating and cooling usage information
  • Technical information from the device

Setup information that you provide: When you install the Nest Learning Thermostat, you’ll be asked several questions in order to help us create an initial programme of temperature settings that will keep you comfortable. For example, we’ll ask for information like whether your thermostat is located in a home or a business, or your home address or postal/ZIP code. This information helps us to customise your experience by, for example, retrieving weather information for your neighbourhood or by enabling Home/Away Assist to automatically switch the behaviour of Nest Products in your home when you leave and when you come back. In addition, the Nest Learning Thermostat pulls information directly from your heating and cooling (HVAC) system to learn its capabilities – such as if it has heating and cooling or is a heating-only system. Answering these questions helps us to set up an initial programme that will keep you comfortable.

Environmental data from the Nest Learning Thermostat’s sensors: We collect data from several sensors built into the Nest Learning Thermostat. These sensors collect data such as current temperature, humidity and ambient light in the room. They can also sense whether something in the room is moving. This helps your Nest Learning Thermostat keep you comfortable when you are at home and save energy when you are away. For example, if the Nest Learning Thermostat senses that you’ve entered the room after an extended period of time, it can adjust the setting to a preferred temperature based on an assumption that you’ve just woken up or returned home. Similarly, if a light goes off or no one is moving in the room, the Nest Learning Thermostat may turn the temperature down sometimes to help save energy.

Direct adjustments to the device: If you change settings like temperature on the Nest Learning Thermostat, it records and feeds that information to the Nest algorithms to learn your desired comfort level in different situations.

Heating and cooling usage information: Every time that your system turns on and off, Nest records the time and duration during which your system was on in order to offer you features such as usage history.

Technical information from the device: In order to improve your experience over time and help troubleshoot any problem that you may encounter with the Nest Learning Thermostat, we record your Nest Learning Thermostat model and serial number, software version and technical information such as battery charge level.

What information does Nest Protect collect?

Nest Protect collects:

  • Setup information that you provide
  • Environmental data from the Nest Protect’s sensors
  • Technical information from the device

Setup information that you provide: When you install Nest Protect, you’ll be asked for information like your home address or postal/ZIP code as well as where in your home you’re installing it. This information helps to customise your experience by, for example, enabling Nest Protect to inform you where an event is occurring, or to better schedule features like Sound Check to run during certain hours of the day.

Environmental data from Nest Protect’s sensors: We collect data from several sensors built into Nest Protect. These sensors collect data such as smoke and carbon monoxide (CO) levels, current temperature, humidity and ambient light in the room. They can also sense whether something in the room is moving. By recording this information, Nest Protect can do things like detect smoke and CO in your home and give you alarms and warnings. For example, if Nest Protect sees that smoke or CO levels are rising, it will give you a Heads Up before the danger reaches emergency alarm levels and tell you what the danger is. Nest Protect 2nd generation also contains a microphone, which enables Nest Protect to deliver certain enhanced features. Specifically, Nest Protect emits sound samples during Safety Check-Up or Sound Check that the microphone will capture to verify that the speaker and siren are functioning.

Technical information from the device: In order to improve your experience over time and help troubleshoot any problem that you may encounter with Nest Protect, we record your Nest Protect model and serial number, software version and technical information such as sensor status, Wi-Fi connectivity and battery charge level.

What information does Nest Cam, Dropcam and/or Nest Hello (collectively, 'Nest Cam') collect?

Nest Cam collects and enables you to collect:

  • Setup information that you provide
  • Environmental data from Nest Cam sensors
  • Video and audio signals and data
  • Facial recognition data to enable the familiar face alerts feature
  • Technical information from the device
  • Shared content

Information input during setup: When you install Nest Cam, you’ll be asked for certain basic information like your camera name, camera description, home address, ZIP/postal code, as well as where in your home you’re installing Nest Cam. This information is used to personalise your experience – for example, to tell you which device is triggering a notification.

Environmental data from the camera’s sensors: We collect data from several sensors built into Nest Cam. These sensors collect data such as device temperature and ambient light in the room. By recording this information, Nest Cam can know, for instance, whether it’s dark and it should turn on night vision.

Video and audio signals and data: Nest Cam enables you to determine the purpose and the means for which you collect video and audio signals data. When you enable the recording or streaming features of your Nest Cam, we may record and process video and/or audio recordings from the device, subject to your instruction, configuration and settings. This may include capturing and emailing to you portions of this data as part of a notification or analysing the data to identify motion or other events. If you instruct us by setting up your camera and choosing to receive mobile notifications, we may process information from your Nest Cam to send you alerts when something happens. In addition, if you have the recording features enabled, we will capture, process and retain video and audio data recordings from your device for the duration of your recording subscription period (for example, 5, 10 or 30 days) and you will be able to access those recordings using the services during that time.

Facial recognition data to enable the familiar face alerts feature: If you choose to use the familiar face alerts feature on your Nest Cam, we will process face images and underlying face prints for the purpose of enabling your device to recognise familiar faces and to notify you of familiar and unknown people. Using the app and your account, you control whether this biometric processing occurs. Depending on where you live and how you configure the products and services, you may need to obtain explicit consent to scan the faces of people visiting your home.

Technical information from the device: In order to improve your experience over time and help troubleshoot any problem that you may encounter with Nest Cam, we record your Nest Cam model and serial number, software version and technical information such as Wi-Fi signal strength.

Saved and shared content: Nest Cam enables you to determine the purpose and the means for which you save and share content. You may save and may choose to share certain content like video clips, live video streams, images, captions and comments for other people to access using the services. We will collect and store information that will allow us to save or share your content at your instruction through the services.

Nest Cam is primarily intended for purely personal or household use. However, data protection and privacy laws in your country may impose certain responsibilities on you and your use of Nest Cam. You (not Nest) are responsible for ensuring that you comply with any applicable laws when you use Nest Cam. For example, you may need to display a notice that alerts visitors to your home that you are using Nest Cam and/or obtain their explicit consent depending on the purpose and the means of your processing activities. Note in particular that recording and sharing clips that involve other people, public spaces and/or scans of peoples’ faces may affect individuals’ privacy and data protection rights.

What information does Nest Secure (including Nest Guard, Nest Detect, Nest Tag and Nest Connect) collect?

Nest Secure collects:

  • Setup information that you provide
  • Data from device sensors
  • Usage and performance information
  • Technical information from the device

Information input during setup: When you install Nest Secure, you’ll be asked for certain basic information such as home address, ZIP/postal code, the location of where in your home you’ve installed your Guard and Detect devices and custom labels for those devices. This information is used to personalise your experience — for example, to tell you which device is triggering a notification or an alarm or by enabling Home/Away Assist to automatically remind you to arm the Nest Secure system when you leave the house.

Data from device sensors: We collect data from several sensors built into Nest Secure devices. For example, Nest Guard can detect motion and Nest Detect can detect motion or whether a window or door is open or closed, depending on how you’ve set up the device in your home. These devices can sense whether something in the room is moving and then sound an alarm and/or send you a notification. Sensors also collect data such as device temperature and ambient light in the room.

Usage and performance information: We collect information about your use of Nest Secure, including activities that you perform (such as arming or disarming the system or changing settings), activities that Nest Secure performs (such as sounding an alarm or sending a notification), your responses to our notifications and which Nest Secure products you add to your Nest account.

Technical information from the device: In order to improve your experience over time and help troubleshoot any problem that you may encounter with Nest Secure, we record device model and serial number, software version and technical information such as sensor status, Wi-Fi connectivity, error logs, power status and battery charge level and whether product features are working properly.

What information is shared among multiple connected Nest Products?

If you have multiple Nest Products interfacing with one another, the products will share certain information with each other, such as data on whether something in the room is moving, temperature data and the occurrence of smoke or CO alarms. This sharing may occur locally among connected devices (both Nest and third-party devices). Sharing can also occur between Nest Products and your mobile device or application or among Nest's servers.

Nest offers a Home/Away Assist feature that uses the information collected from your Nest Products and, if you enable it, the location of a paired phone to determine whether anyone is home or away. You can configure your Nest Products to react to the determination of 'Home' or 'Away' status. For instance, your Nest cameras can turn on when you are away and turn off when you are home.

How does my Nest Product or account interact with third parties?

If I use Works with Nest to connect third-party products and services to Nest, will information be shared? When you choose to connect third-party products and services through Works with Nest, you are shown details about any proposed exchange(s) of data between Nest and the third party that is providing the product or service. Nest or the third party will instead (or also) ask for consent to control the products that you have connected. Your consent is required to allow any of these exchanges or requests for control and you will be able to revoke it at any time.

Is information shared with or received from third parties, outside of the Works with Nest programme? Nest may share information with third parties with your permission. For example, when you enrol in a reward programme for Nest Products offered by our partners, such as Rush Hour Rewards or Safety Rewards, you may be asked for your permission to share certain data between Nest and our partner. Nest requires your permission before sharing information in these circumstances. We may also receive information from our partners and other sources and combine that with the information in your Nest account. For example, in order to offer reward programmes, we might receive information (such as which of our partners offers services where you live) to determine eligibility and efficacy of our programmes.

Additional information about the limited circumstances in which information from your Nest account may be shared with third parties is described below in the section titled 'In what circumstances does Nest share my information?'.

Any Nest data that you choose to share with a third party is governed by that third party’s privacy policy while in that party’s possession.

Any data that Nest receives from third parties will be processed and stored by Nest and will be treated in accordance with this Privacy Statement. This information may be processed in the same ways as any other data that is part of your Nest account or the Nest logs.

What additional information does Nest collect and store when a user connects a Nest Product to the Internet or creates an account?

Wi-Fi network information: To connect your Nest Product to our services or to access your Nest Product over the Internet from a computer, a smartphone or a tablet, you will need to connect it to your Wi-Fi network. During setup, the Nest Product will ask for your Wi-Fi network name (SSID) and password to connect to the Internet. It will save this information on the device, along with your IP address, so that you can access it and control it from your computer, smartphone or tablet, and so that it can communicate with Nest servers and download software updates.

Once connected to your Wi-Fi network, your Nest Product regularly sends the data described in this Privacy Statement (excluding your Wi-Fi password) to Nest to provide you with the services.

Additional authorised users: Nest may provide you with the ability to enable additional authorised users to access your account. If you do so, the additional authorised users may control and view all of your devices, content and Works with Nest connections. Invited users may also add additional authorised users to your account, so be careful to add only those that you trust. An invited user must have or create a Nest account and information about invited users (like email address, name or changes to product settings) will be stored with your account.

Email addresses: When you create a Nest account, we collect and store your email address. From that point forward, your email address is used for communications from Nest. In addition, Nest may provide you with the ability to enable individuals to access your account as additional authorised users or to invite other individuals such as friends or family to share access to your content such as recorded video footage. We will ask you for the email address of any such individuals and automatically send an email invitation on your behalf. Nest stores this information to send this email, to register your friend if your invitation is accepted and to track the success of our invitation services.

Basic profile information: Your account allows you to provide certain basic profile information like your name and profile photo. Names and profile photos may be shown to others in connection with the services. In addition, if you download the Nest mobile app, we may collect and store your mobile device identifiers (such as IDFA, AAID or other device identifiers). For example, if you invite someone as an additional authorised user, they will be able to see your name and photo. You should only use photos that you are willing to make public.

Mobile location data: You may choose to enable features like Home/Away Assist or device pairing. If you do this, you’ll be asked for permission to share location data from your mobile device. If you grant this permission, the Nest app uses standard location services built into iOS and Android. This data may be processed or combined with data from other products to enhance features like Home and Away.

Bluetooth data: Bluetooth-enabled Nest Products (such as Nest Protect 2nd generation and Nest Cam) may broadcast an identifying signal wirelessly. This is used to connect with your Bluetooth-enabled devices (such as a smartphone or tablet) in order to deliver features like easy setup or App Silence.

Remember that when you visit our Sites, we collect personal information as described in our separate Privacy policy for Nest websites. Like most Internet sites, we routinely record log entries (including information such as your IP address) and technical information (such as your browser type and version) when your browser, mobile device or Nest Product contacts our servers.

How does Nest use the information that it collects?

We use this information to provide, develop and improve Nest Products and services, including to make assessments and recommendations about products, safety or energy use. We may use your contact details to send you this information or to ask you to participate in surveys about your Nest use and to send you other communications from Nest.

We may also use this information in a non-identified form for research purposes and to help us make sales, marketing and business decisions. For example, we use aggregated user information about the number of active thermostat users in a particular state to help us decide what energy companies might be good partners and aggregated smoke and CO alarm data to study emergency alarm rates across our customers.

We may use service providers to perform some of these functions. These service providers are restricted from sharing your information for any other purpose.

We use industry-standard methods to keep this information safe and secure while it is transmitted over your home network and through the Internet to our servers. Depending on your location and type of data, Nest may process your personal information on servers that are not in your home country.

In general, for purposes of applicable law (e.g. GDPR), Nest is a controller of the information collected in connection with the products and services. However, in the case of 'Video and audio signals and data' and 'Facial recognition to enable the familiar face alerts feature', you are the controller of this data and Nest is a processor.

Our legal bases for processing information

If European data protection law applies to the processing of your information, we process your information for the purposes described in this Privacy Statement based on the following legal grounds:

When we’re providing a product or service

We process your data to provide and support a product or service that you’ve asked for under a contract, including but not limited to delivering our Terms of Service.

When we’re pursuing legitimate interests

We process your information for our legitimate interests and those of third parties while applying appropriate safeguards that protect your privacy. This means that we process your information for things like:

  • offering and improving Nest Products and services
  • developing new products and features
  • understanding how people use our products and services
  • performing research that improves our services for our users and benefits the public
  • sending you direct marketing and other communications from Nest
  • protecting against harm to the rights, property and safety of Nest, our users and the public
  • detecting, preventing or otherwise addressing fraud, abuse, security or technical issues with our services (including using a Google service such as reCAPTCHA)
  • maintaining and improving the integrity of our computing systems and protecting our users’ data security
  • enforcing legal claims, including investigation of potential violations of applicable Terms of Service

When we’re complying with legal obligations

We process your data when we have a legal obligation to do so, for example, if we’re responding to a legal process or an enforceable governmental request.

With your consent: We ask for your consent to process your information for certain specific purposes and give you the right to withdraw that consent at any time.

In what circumstances does Nest share my information?

Under no circumstance do we share personal information for any commercial or marketing purpose unrelated to the activation and delivery of Nest Products and services without asking you first. Full stop. We do not rent or sell our customer lists. The following are the limited situations where we may share personal information:

  • With your permission: We may share personal information when we have your permission. One example of this would be if you invite another user to access the products on your account as an additional authorised user. Another example is if you sign up for programmes offered by our partners (e.g. energy or insurance companies); if you do this, we may share certain information with the partner. This could include things like your enrolment information and the activation status of your device. If you connect third-party devices and services to your Nest Products through the 'Works with Nest' programme, you are shown information about any proposed exchange of data. Nest or the third party will request your consent to these exchanges on your behalf and you can change your mind at any time. When you use third-party products and services integrated with the Nest Products, their own terms and privacy policies will govern your use of those products and services.
  • For external processing: We have vendors, service providers and technicians who help with some of our processing and storage, including helping to answer your questions. They may also assist with monitoring our servers for technical problems. These technicians (as well as Nest employees) can access certain information about you or your account in line with this work, but they are not allowed to use this data for non-Nest purposes. We also have strict policies and technical barriers in place to prevent unauthorised employee access to video data.
  • As part of business transitions: Upon the sale or transfer of the company and/or all or part of its assets, your personal information may be among the items sold or transferred. We will request a purchaser to treat our data under the privacy statement in place at the time of its collection.
  • For legal reasons: We will share personal information with third parties if we have a good faith belief that access, use, preservation or disclosure of the information is reasonably necessary to (i) meet any applicable law, regulation, legal process or enforceable government request; (ii) enforce Nest policies or contracts, including investigation of potential violations; (iii) detect, prevent or otherwise address fraud, security or technical issues; (iv) protect against harm to the rights, property or safety of Nest, our users or the public as required or permitted by law.

We may share non-personal information (for example, aggregated or anonymised customer data) publicly and with our partners. For example, we may publish trends about energy use or elevated carbon monoxide levels in the home. This information may also be shared with other users to help them better understand their energy usage compared to others in the Nest Community, raise awareness about safety issues or help us generally improve our system. We may also share non-personal information with our partners, for example, if they are interested in providing demand-response services or other incentive programmes. We take steps to keep this non-personal information from being associated with you and we require our partners to do the same.

If you select an outside party for the purchase, installation or service of your Nest device and share your personal information, we cannot control the collection, storage or sharing of information collected by that party. For example, if you buy a Nest Learning Thermostat from a retailer, the retailer may collect personal information as part of the transaction. Or, the party that installed the device may retain information that you provided them with to assist them in servicing the device, if needed. Always check the privacy policies for any company that collects your personal information.

What choices do I have and how can I delete my personal information?

Nest generally stores your personal information on Nest’s servers until you delete or edit it, or for as long as you remain a Nest customer in order to provide you with Nest Products. In addition, Nest may store your personal information to resolve disputes, establish legal defences, conduct audits, pursue legitimate business purposes, enforce our agreements and comply with applicable laws.

As described above, some information is processed and stored directly on the Nest device. Personal information from Nest devices is encrypted while it is being transmitted to Nest.

You can delete the information on the Nest device by resetting it to the defaults (using reset in the settings menu).

You can access, amend or delete your personal information from Nest’s servers through the controls in your account. Nest customers can also request their Nest data by visiting nest.com/privacy. Learn more about our data retention practices here.

Individual rights in the European Economic Area.

If you are located in the European Economic Area, you may seek confirmation regarding whether Nest is processing personal information about you, request access to your personal information and ask that we correct, amend or delete your personal information. In addition, you may object to Nest’s processing of your personal information at any time. However, doing so may impact your use of the products and services.

If applicable law provides you the right to request access to, (receive) port, object to or restrict processing, seek rectification or request erasure of personal information held about you by Nest, you may do so, as applicable, through controls in the Nest application or by contacting Nest. To protect your privacy, Nest will endeavour to take commercially reasonable steps to verify your identity before granting access to or making any changes to your personal information. Learn more at nest.com/privacy.

How does Nest protect my personal information when it is transferred internationally?

When we transfer personal data from the European Economic Area ('EEA') Switzerland or the United Kingdom (UK') to other countries, including to the United States, we use a variety of legal mechanisms to help ensure that your data is appropriately protected. Nest Labs Inc. complies with the EU-US Data Privacy Framework ('EU-US DPF'), the UK Extension to the EU-US DPF and the Swiss–US Data Privacy Framework ('Swiss-US DPF') (collectively, the 'Data Privacy Framework' or 'DPF') regarding the collection, use, sharing and retention of personal information received in the US from the EEA, Switzerland or UK in reliance on the DPF. Nest has certified to the Department of Commerce that it adheres to the principles contained in the DPF (the 'Principles'). To learn more about the DPF certification programme and to view our certification, please visit the Data Privacy Framework website.

As part of our participation in the DPF, if you have an enquiry or complaint regarding our privacy practices in relation to our DPF certification, we encourage you to contact us at privacy@nestlabs.com. You may also refer a complaint to your local data protection authority and we will work with them to resolve your concern. In certain circumstances, the Data Privacy Framework provides the right to invoke binding arbitration to resolve complaints not resolved by other means, as described in Annex I to the Data Privacy Framework principles. Nest is subject to the investigatory and enforcement powers of the US Federal Trade Commission ('FTC').

Nest remains responsible for any of your personal information that is shared under the accountability for onward transfer principle with third parties for external processing performed on our behalf, as described in the 'In what circumstances does Nest share my information?' section.

We may share, as described in this Privacy Statement, information with our affiliates and subsidiaries and third parties. We may disclose information in response to legal process and lawful requests by public authorities in the United States and other countries for the purposes of law enforcement and national security.

Minors

Only individuals aged 18 and older are permitted to act as owners of Nest accounts. Authorised users must be over the age of 13 (or equivalent minimum age in the jurisdiction where they reside) and may use the products and services under the supervision of a parent or legal guardian and only if they agree to be bound by these Terms on your behalf. Nest Products and services do not knowingly collect or store any personal information from anyone under the age of 13.

California requirements

If the California Consumer Privacy Act (CCPA) applies to your information, we provide these disclosures and the tools described in this policy so that you can exercise your rights to receive information about our data practices as well as to request access to and deletion of your information. These tools allow you to review, update and delete your information, as well as export and download a copy of it. You can also read more about Nest’s data retention periods and the process that we follow to delete your information.

Nest does not sell your personal information. We share your information as described in this policy. Nest processes your information for the purposes described in this policy, which include 'business purposes' under the CCPA. These purposes include:

  • offering and improving Nest Products and services
  • developing new products and features
  • understanding how people use our products and services
  • performing research that improves our services for our users and benefits the public
  • protecting against harm to the rights, property and safety of Nest, our users and the public
  • detecting, preventing or otherwise addressing fraud, abuse, security or technical issues with our services
  • maintaining and improving the integrity of our computing systems and protecting our users’ data security

Using service providers to perform services on our behalf, in compliance with our privacy policies and other appropriate confidentiality and security measures

If you have additional questions or requests related to your rights under the CCPA, you can contact us as explained below.

Can the Privacy Statement be changed?

Please note that this Privacy Statement may change from time to time. We will provide notice of any changes on the website or by contacting you.

How can I contact Nest?

For users in the United States and other countries outside of the European Economic Area: Nest Labs, Inc. 3400 Hillview Ave, Palo Alto, CA 94304 USA

For users in the European Economic Area: Nest Labs (Europe) Limited Gordon House, Barrow Street, Dublin, 4 Ireland

For users in the United Kingdom: Google UK Ltd, Belgrave House, 76 Buckingham Palace Road, London, SW1W 9TQ United Kingdom

If you have any questions, you may submit an enquiry to our Data Protection Office, led by our data protection officer, by emailing privacy@nestlabs.com.