You Built a Surveillance Network at Home
EPISODE 23 | THE LISTENING POST: Amazon, Google, and the Surveillance You Paid For
Summary: Most people think of their smart home devices as tools they control. They're not. Echo speakers, Ring cameras, smart TVs, and Google Nest devices are surveillance nodes operated by companies whose business model depends on the data they generate — stored on infrastructure you don't own, accessible to law enforcement through legal channels you didn't agree to, and governed by policies that can change without your consent. In March 2025, Amazon removed the local voice processing option from Echo devices. In February 2026, the FBI recovered footage from a Google Nest camera that had been thought to be offline. This episode documents what each major smart home ecosystem actually does with your data — and what you can do to reduce the exposure.
---
Key Settings to Change Right Now:
Amazon Echo / Alexa:
- Alexa App → More → Settings → Alexa Privacy → Manage Your Alexa Data → enable "Don't Save Recordings"
- Set voice history auto-deletion to 3 months
- Delete voice history manually at: alexa.amazon.com
- Alexa App → More → Settings → Account Settings → Amazon Sidewalk → toggle off
- Do not place Echo devices in bedrooms, home offices, or rooms where sensitive conversations occur
Ring:
- Ring App → Control Center → Law Enforcement → review and configure sharing settings
- For warrant-required camera alternatives: Arlo, Apple Home Camera, Wyze, Eufy (Anker)
Smart TVs — Disable ACR:
- Samsung: Settings → Support → Terms & Policies → disable "Viewing Information Services"
- LG: Settings → All Settings → General → Additional Settings → disable "Live Plus"
- Vizio: Menu → System → Reset & Admin → disable "Smart Interactivity"
- Sony (SambaTV): Settings → Device Preferences → Usage & Diagnostics → disable; also Settings → Apps → See All Apps → SambaTV → disable or uninstall
Google Nest:
- Google Home App → Account → Privacy settings → review recording and storage settings
- Enable two-step verification on your Google account
- Review and delete camera history in Google Home
Home Network Hardening:
- Segment IoT devices onto a separate network — put all smart home devices (Echo, Ring, smart TVs, thermostats, cameras) on a dedicated network isolated from your computers, phones, and storage. Guest network is the easy entry point; a dedicated IoT VLAN with firewall rules (allow internet, block LAN) is the proper approach. Note: full VLAN segmentation breaks mDNS-dependent integrations (Chromecast, Sonos, HomeKit, Matter) unless you configure mDNS bridging.
- Add DNS-level blocking at the router — configure NextDNS or Pi-hole as your router's DNS server to block adtech, tracking, and data broker domains across every device on the network — including smart TVs, Alexa, and Ring — without per-device configuration.
- Hardware option: Firewalla — a dedicated network security appliance that plugs between your modem and router. Provides per-device traffic monitoring, DNS-level blocking, intrusion detection, and IoT segmentation through a mobile app. No router replacement required.
---
Key Resources:
- [Amazon Alexa Privacy Settings](https://www.amazon.com/alexa-privacy/apd/home)
- [Ring Control Center — Law Enforcement Settings](https://ring.com/privacy)
- [Amazon Sidewalk — Opt Out Instructions](https://www.amazon.com/Amazon-Sidewalk)
- [Consumer Reports — How to Turn Off Smart TV Snooping](https://www.consumerreports.org/electronics/privacy/how-to-turn-off-smart-tv-snooping-features-a4840102036/)
- [EFF — Amazon Ring and Law Enforcement](https://www.eff.org/deeplinks/2025/07/amazon-ring-cashes-techno-authoritarianism-and-mass-surveillance)
- [Google Nest Transparency Report](https://nest.com/legal/transparency-report/)
- [ACLU — Amazon Sidewalk](https://www.aclu.org/news/privacy-technology/sidewalk-the-next-frontier-of-amazons-surveillance-infrastructure)
- [NextDNS](https://nextdns.io) — DNS-level blocking, free tier available; configure as router DNS for whole-home coverage
- [Pi-hole](https://pi-hole.net) — Self-hosted DNS blocker; v6 released late 2025
- [Firewalla](https://firewalla.com) — Network security appliance with IoT segmentation, intrusion detection, per-device controls
- [XDA — Network Segmentation for Smart Homes](https://www.xda-developers.com/network-segmentation-is-smart-home-security-step-nobody-talks-about/)
---
Key Facts from This Episode:
- In March 2025, Amazon eliminated the "Do Not Send Voice Recordings" local processing option on Echo devices — all voice now routes to Amazon's cloud
- SambaTV's ACR technology is embedded in 40+ million smart TVs globally; Vizio was documented making more profit from viewer data sales than from hardware
- Amazon Sidewalk covers approximately 95% of the U.S. and is enabled by default on compatible Echo and Ring devices
- Ring partnered with Axon (body camera company) in April 2025 to give law enforcement access to footage through Axon's evidence platform; separately partnered with Flock Safety (license plate readers) before canceling that deal in February 2026
- In February 2026, the FBI recovered footage from a Google Nest camera that investigators believed was offline — retrieved from Google's backend cloud storage
- Google Nest can share footage without a warrant in emergency situations where Google "reasonably believes" there is imminent risk to life
- 2025 Echo Show models removed the physical camera shutter — a hardware privacy control — from their devices
- The Mirai botnet and its 2025–2026 variants continue to target unpatched IoT devices as DDoS infrastructure; an infected device on your network can get your IP blacklisted by your ISP
---
Key Takeaways:
- Smart home devices are surveillance nodes operated by third parties — the privacy controls available to you are only the ones the company chooses to provide
- "Deleting" footage or disabling a device does not guarantee the data is gone from backend infrastructure
- Your neighbor's Ring camera captures your movements without your consent — the surveillance network extends beyond your own property
- ACR in smart TVs reports second-by-second viewing data to advertisers and data brokers, enabled by default
- Segmenting IoT devices onto an isolated network limits the blast radius if any device is compromised — and is the most underused defense available to home users
- DNS-level blocking through NextDNS or Pi-hole extends privacy protections to every device on the network without per-device configuration
- Meaningful mitigation is available at both the device level and the network level — none of it is the default
---
Call To Action:
Two things to do this week. First: find your smart TV's ACR setting and turn it off — five minutes, done. Second: check whether your router supports a separate guest or IoT network. Put your smart home devices on it. That one step limits what a compromised Echo or smart TV can reach on the rest of your network.
If you want to go further, add NextDNS or Pi-hole as your router's DNS — fifteen minutes, whole-network coverage without touching a single device setting.
None of these are the default. That's not an accident.
All the settings and tools are in these notes.
Head to OPSECPodcast.com for everything else.
Your privacy and your security is your responsibility.