NEWNow you can listen to Fox News articles!
Last month, Google officially disabled remote control features for the first and second generation Nest learning thermostats. Many owners assumed that the devices would stop interacting with Google once the company removed the smart features.
However, new research shows that these early Nest devices continue to upload detailed logs to Google even though support has ended.
Subscribe to my FREE CyberGuy Report
Get my best tech tips, breaking security alerts, and exclusive offers straight to your inbox. Plus, you'll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.
Early Nest learning thermostats still send sensor data to Google even after losing remote control functionality. (Google)
Researcher discovers unexpected data downloads from older Nest devices
Security researcher Cody Kociemba uncovered this mystery data flow after digging into the back end of a repair bounty competition run by FULU, a repair rights group co-founded by electronics repair expert and YouTuber Louis Rossmann. The challenge asked developers to restore lost smart features for unsupported Nest devices. Kociemba teamed up with the open source software community and created No Longer Evil, software that brings smart functionality back to those outdated thermostats.
While cloning Google's API to build a project, he suddenly received a flood of logs from clients' devices. This surprise led to a deeper look at what Google is still collecting.
Researcher Cody Kociemba discovered ongoing data downloading while creating a tool to restore intellectual function. (Google)
What Nest thermostats keep sending to Google
Even though the remote control no longer works, Kociemba found that the first Nest learning thermostats still uploaded a constant stream of sensor data to Google. This includes:
- Manual temperature change
- Is there anyone in the room
- When sunlight hits the device
- Temperature readings
- Humidity levels
- Motor activity
- Ambient Light Data
Kociemba says the volume of logs was enormous. He disabled incoming data because he never expected devices to remain connected to Google after disconnecting.
Google previously said that unsupported models would “continue to send logs to help diagnose issues.” However, Kociemba notes that Google can no longer use this data to help customers as support has been completely discontinued. This makes the continuous flow of data even more mysterious.
AI BUG: GMAIL DATA LEAKED BEFORE OPENAI PATCH
CyberGuy contacted Google for commentand the representative provided us with a statement,
“The Nest Learning Thermostat (Gen 1 and Gen 2) is no longer supported in the Nest and Home apps, but temperature and schedule settings can still be made directly on the device. These devices will soon be disabled and removed from all user accounts. Diagnostic logs that are not associated with a specific user account will continue to be sent to Google for maintenance and issue tracking. Users who prefer to stop providing these logs can simply disconnect their device from Wi-Fi through the settings on the device. menu”.
Thermostats continue to report temperature, motion, and light data even though official support has ended.
Why is this discovery important?
Google has limited access to remote control, security updates, software updates, and status checks through the Nest and Google Home apps. Owners can no longer rely on the devices' key intelligence functions. However, thermostats still transmit data to Google, creating a one-way communication that helps the company more than the customer.
Users are not benefiting from logs since support has been discontinued. Google cannot use these logs to diagnose problems or offer assistance. This raises questions about transparency and user choice for people who assumed the connection was broken.
The FULU award that inspired the opening
The FULU bounty program encouraged developers to create tools that restored functionality to devices that had been abandoned by their manufacturers. After reviewing the submissions, FULU awarded Kociemba and another developer known as Team Dinosaur the top award of $14,772 for bringing back smart features to early Nest models.
Their work shows how community-led renovation efforts can keep useful devices in working order. It also shows how companies handle device data long after official support has ended.
How to Stay Safe If You're Still Using an Old Nest Thermostat
If you have one of these unsupported Nest thermostats on your network, you can take a few simple steps to protect your privacy. These tips can help reduce the amount of data your device sends to Google and reduce the risk of infection.
1) Check your Google account activity.
Start by checking what Google has associated with your home devices. Visit myactivity.google.com and look for thermostat logs or events you weren't expecting.
2) Place your device on a separate Wi-Fi network.
A guest network Keeps the thermostat away from your main devices. This limits the thermostat's reach and helps prevent wider access.
3) Block outgoing traffic if possible.
Some routers allow prevent individual devices from sending data to the Internet. This disables log loading but still allows the thermostat to control heating and cooling.
4) Disable all remaining cloud features.
If cloud settings are still available in the device menu, disable anything related to remote access or online diagnostics. Even partial control helps reduce data flow.
5) Remove old device associations from your Google account.
Check your connected devices in Google settings. Delete any old Nest entries that no longer serve any purpose. This stops remaining links that may still be sending data.
6) Configure the router settings that report to the device analyst.
Some routers send analytics back to the router manufacturer. Turn off cloud diagnostics to reduce the impact of unsupported smart products.
7) Plan for replacement
Unsupported devices will lose security updates. If you can't isolate your thermostat from your network, consider upgrading to a model that is still receiving patches.
Pro tip: Reduce your load with a data removal service
A data deletion service can help you reduce the amount of personal information available to data brokers. This adds another layer of privacy that keeps your smart home secure.
While no service can guarantee complete removal of your data from the internet, a data removal service is indeed a smart choice. They don't come cheap, and neither does your privacy. These services do all the work for you, actively monitoring and systematically removing your personal information from hundreds of websites. This is what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk that scammers will link leaked data to information they can find on the dark web, making it harder for them to target you.
Check out my top data removal services and get a free scan to see if your personal information has already been published online by visiting Cyberguy.com.
Get a free scan to see if your personal information has already been published online: Cyberguy.com.
MORE THAN 2 BILLION USERS FACE THE RISK OF PHISHING AFTER GOOGLE DATA LEAK
Take My Quiz: How Safe Is Your Online Security?
Do you think your devices and data are truly protected? Take this quick quiz to find out what your digital habits are. From passwords to Wi-Fi settings, you'll get personalized information about what you're doing right and what needs improvement. Take my test here: Cyberguy.com.
Kurt's key takeaways
The discovery that older Nest thermostats are still sending data to Google even after losing smart features gives owners a reason to take a closer look at their connected home. Unsupported devices may continue to communicate with servers even when the useful end of the connection ends. Understanding what your gadgets are using helps you make informed decisions about what stays on your network.
Will you continue to use a device that still sends data to its manufacturer even after it loses the features you paid for? Let us know by writing to us at Cyberguy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Subscribe to my FREE CyberGuy Report
Get my best tech tips, breaking security alerts, and exclusive offers straight to your inbox. Plus, you'll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.
Copyright CyberGuy.com 2025. All rights reserved.
