09-20-2016 Privacy Statement - archived
This archived Privacy Statement was superseded by our
current Privacy Statement on 4/17/2017.
At Nest, we take your privacy seriously.
This Privacy Statement for Nest Products and Services (“Privacy Statement”) describes information that Nest Labs, Inc. and its subsidiaries and affiliates (collectively, “Nest”) collect, use, share, and store, including personal information (i.e., information that personally identifies you, such as your name, email address or billing information, or other data that can be reasonably used to infer this information).
This document focuses on information related to the operation of Nest products and services, including the Nest Learning Thermostat™, Nest Protect: Smoke + Carbon Monoxide™ Alarm, Nest Cam™, Dropcam™, Works with Nest™, MyEnergy™, and other products from Nest (collectively, “Nest Products”). In this Privacy Statement, the expression “Nest Products” also includes our Web Apps, Mobile Apps, and Subscription Services as defined in our Terms of Service.
- We will be transparent about the different types of information we collect and how we use them.
- We will ask your permission before sharing your personal information with third parties for purposes other than at your request or to provide Nest’s Products, and to do so only when we think they will provide you with a welcome additional service.
- We will use best-in-class data security tools to keep your data safe and protect the Nest Products from unauthorized access.
Consent to data collection and processing. By using Nest Products, you agree to allow us to collect and process information as described in this Privacy Statement.
Consent to international data transfers. Your personal information may be collected, processed and stored by Nest or its service providers in the United States and other countries where our servers reside. Please be aware that the privacy protections and legal requirements, including the rights of authorities to access your personal information, in some of these countries may not be equivalent to those in your country. If you are using Nest Products in the European Economic Area or other regions with laws governing data collection and use that may differ from United States law, you consent to the transfer of your personal data to the United States and other countries where Nest operates. We have provided you with more information below as to how we protect your personal data when it is transferred internationally: How does Nest protect my personal information when it is transferred internationally?
The Nest Learning Thermostat collects:
- Setup information you provide
- Environmental data from the Nest Learning Thermostat’s sensors
- Direct adjustments to the device, including temperature or settings
- Heating and cooling usage information
- Technical information from the device
Setup information you provide: When you install the Nest Learning Thermostat, you’ll be asked several questions in order to help us create an initial program of temperature settings that will keep you comfortable. For example, we’ll ask for information like whether your thermostat is located in a home or a business, or like your home address or postal/ZIP code. This information helps us to customize your experience by, for example, retrieving weather information for your neighborhood or by enabling Home/Away Assist to automatically switch the behavior of Nest products in your home when you leave and when you come back. In addition, the Nest Learning Thermostat pulls information directly from your heating and cooling (HVAC) system to learn its capabilities – such as if it has heating and cooling or is a heating-only system. Answering these questions helps us to set up an initial program that will keep you comfortable.
Environmental data from the Nest Learning Thermostat’s sensors: We collect data from several sensors built into the Nest Learning Thermostat. These sensors collect data such as current temperature, humidity and ambient light in the room. They can also sense whether something in the room is moving. This helps your Nest Learning Thermostat keep you comfortable when you are at home and save energy when you are away. For example, if the Nest Learning Thermostat senses that you’ve entered the room after an extended period of time, it can adjust the setting to a preferred temperature, based on an assumption that you’ve just woken up or returned home. Similarly, if a light goes off or no one is moving in the room, the Nest Learning Thermostat may turn the temperature down sometimes to help save energy.
Direct adjustments to the device: If you change settings like temperature on the Nest Learning Thermostat, it records and feeds that information to the Nest algorithms to learn your desired comfort level in different situations.
Heating and cooling usage information: Every time your system turns on and off, Nest records the time and duration during which your system was on in order to offer you features such as usage history.
Technical information from the device: In order to improve your experience over time and help troubleshoot any problem you may encounter with the Nest Learning Thermostat, we record your Nest Learning Thermostat model and serial number, software version, and technical information such as battery charge level.
What information does Nest Protect collect?
Nest Protect collects:
- Setup information you provide
- Environmental data from the Nest Protect’s sensors
- Technical information from the device
Setup information you provide: When you install Nest Protect, you’ll be asked for information like your home address or postal/ZIP code as well as where in your home you’re installing it. This information helps to customize your experience by, for example, enabling Nest Protect to inform you where an event is occurring, or to better schedule features like Sound Check to run during certain hours of the day.
Environmental data from Nest Protect’s sensors: We collect data from several sensors built into Nest Protect. These sensors collect data such as smoke and carbon monoxide (CO) levels, current temperature, humidity and ambient light in the room. They can also sense whether something in the room is moving. By recording this information, Nest Protect can do things like detect smoke and CO in your home, and give you alarms and warnings. For example, if Nest Protect sees that smoke or CO levels are rising, it will give you a Heads Up before the danger reaches emergency alarm levels and tell you what the danger is.
Nest Protect 2nd generation also contains a microphone, which enables Nest Protect to deliver certain enhanced features. Specifically, Nest Protect emits sound samples during Safety Checkup or Sound Check that the microphone will capture to verify that the speaker and horn are functioning.
Technical information from the device: In order to improve your experience over time and help troubleshoot any problem you may encounter with Nest Protect, we record your Nest Protect model and serial number, software version, and technical information such as sensor status, Wi-Fi connectivity, and battery charge level.
What information does Nest Cam / Dropcam (collectively, “Nest Cam”) collect?
Nest Cam collects:
- Setup information you provide
- Environmental data from Nest Cam sensors
- Video and audio signals and data
- Technical information from the device
- Shared content
Information input during setup: When you install Nest Cam, you’ll be asked for certain basic information like your camera name, camera description, home address, ZIP/postal code, as well as where in your home you’re installing Nest Cam. This information is used to personalize your experience – for example, to tell you which device is triggering a notification.
Environmental data from the camera’s sensors: We collect data from several sensors built into Nest Cam. These sensors collect data such as device temperature and ambient light in the room. By recording this information, Nest Cam can know, for instance, whether it’s dark and it should turn on night vision.
Video and audio signals and data: When you enable the recording or streaming features of your Nest Cam, we may record and process video and/or audio recordings from the device, subject to your configuration and settings. This may include capturing and emailing to you portions of this data as part of a notification or analyzing the data to identify motion or other events. We may process information from your Nest Cam so that we can send you alerts when something happens. In addition, if you have the recording features enabled, we will capture, process and retain video and audio data recordings from your device for the duration of your recording subscription period (for example, 10 or 30 days) and you will be able to access those recordings using the Services during that time.
Technical information from the device: In order to improve your experience over time and help troubleshoot any problem you may encounter with Nest Cam, we record your Nest Cam model and serial number, software version, and technical information such as Wi-Fi signal strength.
Saved and Shared Content: You may save and may choose to share certain content like video clips, live video streams, images, captions, and comments for other people to access using the Services. We will collect and store information that will allow us to save or share your content as directed by you through the Services.
Data protection and privacy laws in your country may impose certain responsibilities on you and your use of Nest Cam. You (not Nest) are responsible for ensuring that you comply with any applicable laws when you use Nest Cam. For example, you may need to display a notice that alerts visitors to your home that you are using Nest Cam. Note in particular that recording and sharing clips that involve other people may affect their privacy and data protection rights.
What information does MyEnergy collect?
MyEnergy is an optional service offered by Nest with a separate sign-up process. If you create a MyEnergy account, then Nest collects:
- Information input during MyEnergy signup
- Utility resource consumption (from your utilities)
Information input during signup: When you create a MyEnergy account, we ask you for basic information such as your email address and your home address. We use your home address to identify the utilities that serve your home and to match your individual utility accounts to your home. You can also enter and store the credentials you use to access your utility accounts; you do not have to supply these credentials to create an account, but they are needed to access your utility information. With your permission, we use your email address to send you updates about your utility resource consumption.
Utility resource consumption (from your utilities): If you use MyEnergy to sign into a utility account, we may access, process, and store information from your utility. With your consent, MyEnergy may access different types of information from your utility. For example, MyEnergy may download, analyze, and store your utility bill statements.
MyEnergy data can be combined with other information in your Nest account and can help us to better understand things like your energy usage.
What information is shared among multiple connected Nest Products?
If you have multiple Nest Products interfacing with one another, the products will share certain information with each other, such as data on whether something in the room is moving, temperature data, and the occurrence of smoke or CO alarms. This sharing may occur locally among connected devices (both Nest and third-party devices). Sharing can also occur between Nest Products and your mobile device or application, or among Nest's servers. Understanding whether something in the room is moving can help the products do things like better assess if you are away from home so temperature can be reduced and you can save more energy. You may also set the Home & Away feature to enable or disable other features like Nest Cam recording.
How does my Nest Product or account interact with third parties?
If I use Works with Nest to connect third-party products and services to Nest, will information be shared? When you choose to connect third-party products and services through Works with Nest, you are shown details about any proposed exchange(s) of data between Nest and the third party that is providing the product or service. In some cases, Nest or the third party will instead (or also) ask for permission to control the products that you have connected. Your explicit consent is required to allow any of these exchanges or requests for control and you will be able to revoke it at any time.
Is information shared with or received from third parties, outside of the Works with Nest program? Nest may share information with third parties with your permission. For example, when you enroll in a rewards program for Nest Products offered by our partners – such as Rush Hour Rewards or Safety Rewards – you may be asked for your permission to share certain data between Nest and our partner. Nest requires your explicit consent before sharing information in these circumstances. We may also receive information from our partners and other sources and combine that with the information in your Nest account. For example, in order to offer rewards programs, we might receive information (such as which of our partners offers services where you live) to determine eligibility and efficacy of our programs.
Additional information about the limited circumstances in which information from your Nest account may be shared with third parties is described below in the section titled "In what circumstances does Nest share my information?".
Any data that Nest receives from third-parties will be processed and stored by Nest and will be treated in accordance with this Privacy Statement. This information may be processed in the same ways as any other data that is a part of your Nest account or the Nest logs.
What additional information does Nest collect and store when a user connects a Nest Product to the Internet or creates an account?
Wi-Fi Network Information: To connect your Nest Product to our Services, or to access your Nest Product over the Internet from a computer, a smartphone or a tablet, you will need to connect it to your Wi-Fi network. During setup, the Nest Product will ask for your Wi-Fi network name (SSID) and password to connect to the Internet. It will save this information on the device, along with your IP address, so that you can access it and control it from your computer, smartphone or tablet, and so that it can communicate with Nest servers and download software updates.
Once connected to your Wi-Fi network, your Nest Product regularly sends the data described in this Privacy Statement (excluding your Wi-Fi password) to Nest to provide you with the Services.
Additional Authorized Users: Nest may provide you with the ability to enable additional authorized users to access your account. If you do so, the additional authorized users may control and view all of your devices, content, and Works with Nest connections. Invited users may also add additional authorized users to your account, so be careful to add only those you trust. An invited user must have or create a Nest account, and information about invited users (like email address, name, or changes to product settings) will be stored with your account.
Email Addresses: When you create a Nest account, we collect and store your email address. From that point forward, your email address is used for communications from Nest. In addition, Nest may provide you with the ability to enable individuals to access your account as additional authorized users, or to invite other individuals such as friends or family to share access to your content such as recorded video footage. We will ask you for the email address of any such individuals and automatically send an email invitation on your behalf. Nest stores this information to send this email, to register your friend if your invitation is accepted, and to track the success of our invitation services.
Basic Profile Information: Your account allows you to provide certain basic profile information like your name and profile photo. Names and profile photos may be shown to others in connection with the Services. For example, if you invite someone as an additional authorized user, he or she will be able to see your name and photo. You should only use photos you are willing to make public.
Mobile location data: You may choose to enable features like Home/Away Assist or device pairing. If you do this, you’ll be asked to share location data from your mobile device or from additional authorized users. This data may be processed or combined with data from other products to enhance features like Home & Away.
Bluetooth data: Bluetooth-enabled Nest Products (such as Nest Protect 2nd generation and Nest Cam) may broadcast an identifying signal wirelessly. This is used to connect with your Bluetooth-enabled devices (such as a smartphone or tablet) in order to deliver features like easy setup or App Silence.
How does Nest use the information it collects?
We use this information to provide, develop and improve Nest Products and services, including to make assessments and recommendations about products, safety, or energy use. We may use your contact details to send you this information, or to ask you to participate in surveys about your Nest use, and to send you other communications from Nest.
We may also use this information in an aggregated, non-identified form for research purposes and to help us make sales, marketing, and business decisions. For example, we use aggregated user information about the number of active thermostat users in a particular state to help us decide what energy companies might be good partners, and aggregated smoke and CO alarm data to study emergency alarm rates across our customers.
We may use service providers to perform some of these functions. Those service providers are restricted from sharing your information for any other purpose.
We use industry-standard methods to keep this information safe and secure while it is transmitted over your home network and through the Internet to our servers. Depending on your location and type of data, Nest may process your personal information on servers that are not in your home country.
In what circumstances does Nest share my information?
Under no circumstance do we share personal information for any commercial or marketing purpose unrelated to the activation and delivery of Nest Products and services without asking you first. Period. We do not rent or sell our customer lists.
The following are the limited situations where we may share personal information:
With your explicit consent: We may share personal information when we have your consent. One example of this would be if you invite another user to access the Products on your account as an additional authorized user. Another example is if you sign up for programs offered by our partners (e.g., energy or insurance companies); if you do this, we may share certain information with the partner. This could include things like your enrollment information and the activation status of your device. Similarly, when you connect third-party devices and services to your Nest Products through the Works with Nest program, you are shown information about any proposed exchange of data. Your explicit consent is required to allow these exchanges on your behalf and you can change your mind at any time.
For external processing: We have vendors, service providers, and technicians who help with some of our processing and storage, including helping to answer your questions. They may also assist with monitoring our servers for technical problems. These technicians (as well as Nest employees) can access certain information about you or your account in line with this work but these technicians are not allowed to use this data for non-Nest purposes. We also have strict policies and technical barriers in place to prevent unauthorized employee access to video data.
As part of business transitions: Upon the sale or transfer of the company and/or all or part of its assets, your personal information may be among the items sold or transferred. We will request a purchaser to treat our data under the privacy statement in place at the time of its collection.
For legal reasons: We may provide information to a third party if we believe in good faith that we are required to do so for legal reasons. For example, we may disclose information in response to legal process and we may disclose information in response to lawful requests by public authorities in the United States and other countries for the purposes of law enforcement and national security.
We may share non-personal information (for example, aggregated or anonymized customer data) publicly and with our partners. For example, we may publish trends about energy use or elevated carbon monoxide levels in the home. This information may also be shared with other users to help them better understand their energy usage compared to others in the Nest community, raise awareness about safety issues, or help us generally improve our system. We may also share non-personal information with our partners, for example, if they are interested in providing demand-response services or other incentive programs. We take steps to keep this non-personal information from being associated with you and we require our partners to do the same.
If you select an outside party for the purchase, installation, or service of your Nest device and share your personal information, we cannot control the collection, storage or sharing of information collected by that party. For example, if you buy a Nest Learning Thermostat from a retailer, the retailer may collect personal information as part of the transaction. Or the party that installed the device may retain information that you provided to them to assist them in servicing the device if needed. Always check the privacy policies for any company that collects your personal information.
How long does Nest save my personal information and how can I delete it?
Nest generally stores your personal information on Nest’s servers until you delete or edit it, or for as long as you remain a Nest customer in order to provide you with Nest Products.
As described above, some information is processed and stored directly on the Nest device. All personal information is encrypted as it is transmitted to Nest and cannot easily be accessed.
You can delete the information on the Nest device by resetting it to the defaults (using Reset in the Settings menu).
You can access, amend or delete your personal information from Nest’s servers through the controls in your account. Because of the way we maintain certain Services, after your information is deleted, backup copies may linger for some time before they are deleted, and we may retain certain data for a longer period of time if we are required to do so for legal reasons.
When we transfer personal data from the European Economic Area to other countries, including to the United States, we use a variety of legal mechanisms to help ensure your data is appropriately protected. Nest Labs Inc. complies with the EU-US Privacy Shield principles (the “Principles”) regarding the collection, use, sharing, and retention of personal information from the European Economic Area, as described in our Privacy Shield certification.
As part of our participation in Privacy Shield, if you have a dispute with us about our adherence to the Principles, we will seek to resolve it through JAMS based in the US, and under certain conditions, through the Privacy Shield arbitration process. (In certain circumstances, the Privacy Shield Framework provides the right to invoke binding arbitration to resolve complaints not resolved by other means, as described in Annex I to the Privacy Shield Principles.) If you have a Privacy Shield-related complaint, please contact us at firstname.lastname@example.org.
Privacy Shield participants are subject to the investigatory and enforcement powers of the US Federal Trade Commission and other authorized statutory bodies. Under certain circumstances (i.e. personal data sharing under the Onward Transfer Principle with third parties for external processing on our behalf), participants like us may be liable for the transfer of personal information from the EU to third parties outside the EU. Learn more about Privacy Shield here.
We also comply with the US-Swiss Safe Harbor Framework as set forth by the US Department of Commerce regarding the collection, use and retention of personal information from Switzerland. Nest, as a wholly owned subsidiary of Google Inc. (“Google”), has certified that it adheres to the Safe Harbor Privacy Principles and also applies the EU-US Privacy Shield Principles to personal information from Switzerland. To learn more about the Safe Harbor program, and to view Google’s certification, please visit the Safe Harbor website.
We may share, as described in this Privacy Statement, information with our affiliates and subsidiaries, and third parties. We may disclose information in response to legal process and lawful requests by public authorities in the United States and other countries for the purposes of law enforcement and national security.
Please note that this Privacy Statement may change from time to time. We will provide notice of any changes on the website or by contacting you.
If you have any questions, please contact us at email@example.com.