this post was submitted on 08 Feb 2025
32 points (100.0% liked)

homeassistant

14807 readers
18 users here now

Home Assistant is open source home automation that puts local control and privacy first.
Powered by a worldwide community of tinkerers and DIY enthusiasts.

Home Assistant can be self-installed on ProxMox, Raspberry Pi, or even purchased pre-installed: Home Assistant: Installation

Discussion of Home-Assistant adjacent topics is absolutely fine, within reason.
If you're not sure, DM @GreatAlbatross@feddit.uk

founded 2 years ago
MODERATORS
GreatAlbatross@feddit.uk
greatalbatross@lemmy.world
32
Security/FULL self hosting? Looking for info before starting... (lemmy.world)
submitted 4 months ago by batmaniam@lemmy.world to c/homeassistant@lemmy.world
20 comments fedilink hide all child comments
 

Hi All,

Looking to steer into HA, but have some questions on how data is handled.

First, I don't mean the opt-in on the scant analytics. HA is very clear about that which is great. Awesome clear policy.

Second, I understand that "integrations", which use a device manufacturer's/services software/infrastructure, are outside scope here (although I do have some questions).

My goal is to find and work a system where no one knows when my lights are turning off and on, and is only on my hardware. IE: If the internet went down, but I was still connected to local wifi, can my HA still work?

The answer seems like a strong "yes", but I want to double check. I also want to make sure if I do use an integration that there's not an avenue for telemetry beyond that integration. IE: I don't want Spotify to gain access to what temperature I keep my house just because I want to play music.

I also have questions about the mobile app, but if the rest is truly locked down, I can navigate that.

I currently have an automated bog garden, but how I did it isn't really scalable. It's all modbus components with values passed to a local server to generate a dashboard. I'd like to expand to more actual "home" automation, and this seems like a great tool!

Thanks for any clarification.

you are viewing a single comment's thread
view the rest of the comments
[–] roofuskit@lemmy.world 3 points 4 months ago (2 children)

If the integration has a cloud symbol you should assume it's sharing data. There is an unofficial integration "store" called HACS. Those integrations are not reviewed by Home Assistant so you cannot be sure even if it is marked as not being a cloud integration, unless you review the code it may do things you are unaware of. That said, many HACS integrations are worth considering.

[–] batmaniam@lemmy.world 3 points 4 months ago (1 children)

Clear answer, thank you so much. Glad to hear there's a community. Worst case scenario I can always make it so a self-hosted voice to text triggers a script on a local device through a spotify API.

[–] JollyGreen_sasquatch@sh.itjust.works 4 points 4 months ago (1 children)

By syncing data, it isn't all data, just that it requires non-local resources, ie cloud/API, to function. You do have to look at each integration to see what it is doing, I would expect a Spotify integration is just hitting the Spotify API and maybe can interact with local devices that Spotify can stream to (ie a Chromecast)

[–] batmaniam@lemmy.world 3 points 4 months ago (1 children)

And it's explicitly "not all data"? I'm really impressed by the community, I'd assume if a Philips lightbulb was getting access to geolocation data via HA someone would have noticed.

[–] JollyGreen_sasquatch@sh.itjust.works 3 points 4 months ago (1 children)

If Phillips wrote the plugin it might but all the plugins I have looked at are written by the community. Most plugins are only polling based, so they are scraping data into HAs recorder plugin.

[–] batmaniam@lemmy.world 2 points 4 months ago

thanks, the fact that there's this level of insight in the community makes me comfortable of going down this road. I'll keep an eye on integrations.

[–] just_another_person@lemmy.world 3 points 4 months ago (1 children)

And all the code is available online because it's open source. You can make sure if you're really suspicious of something.

[–] batmaniam@lemmy.world 1 points 4 months ago

Glad to hear it, it's not so much suspicious as the principle. It's weird, I just hate the notion that if I bump up my thermostat a degree or two someone who I pay to give me music is keeping track.