← IoT Privacy Database

Amazon Sidewalk

Amazon.com, Inc. · Smart-Home Hub / Ecosystem

Staff Reviewed — a person at DeSpy reviewed this rating.

3.7Surveillance
Index
Policy — what its policy permitsD
Evidence — what research provesC

Sidewalk quietly conscripts your Echo speakers, Ring cameras and other Amazon gear into a neighborhood mesh that shares a slice of your home internet with nearby strangers' devices and relays their traffic through yours. Amazon enabled it by default via software update, so millions of households joined without an affirmative choice. It extends Amazon's connectivity - and, critics warn, the reach of tie-ins like Ring cameras and Tile trackers - across property lines with a shared always-on network you did not ask for.

Why this rating

The written explanation of this rating is withheld while a person re-reviews it.

What it is

Manufacturer
Amazon.com, Inc.
Category
Smart-Home Hub / Ecosystem
Model years
2021-present
Market status
Current
Companion app
Alexa

The evidence 2

Independent research, regulatory action, lawsuits and journalism about how this device handles personal data — the "what actually happens" axis. Each links to its source.

  1. Ngo review · Electronic Frontier Foundation · 2021-06

    EFF criticizes Sidewalk's opt-out-by-default enrollment and warns that tying Ring cameras together through the mesh can enable neighborhood-wide surveillance, stressing that consent must be affirmative.

    Why it matters here: Names the exact auto-opt-in dark pattern and the cross-household surveillance risk that make Sidewalk a privacy concern for non-consenting neighbors.

  2. Journalism · Threatpost · 2021-06

    Security reporters detail how Amazon auto-enrolled devices into Sidewalk with only a narrow opt-out window, raising both privacy and added-attack-surface concerns.

    Why it matters here: Documents the default-on enrollment and the security implications of adding a stranger-facing shared network to the home.

Are you the maker? Respond to this finding

Free. There is no paid or faster path, and nothing about a rating is for sale. Prove you control your company's domain with one DNS record; a person then reads your statement beside our finding and decides whether to publish it.

An email is encrypted at rest and opened only to answer you; it is erased 30 days after we resolve this (or 180 days if still open), and you can erase it sooner. Unproven filings are deleted after 14 days.

Think something here is wrong?

Evidence and research improve when people push back. Tell us what to re-check — a misattributed domain, an outdated classification, a claim about your own app — and a human will review it. Responses can take up to 30 days.

If you leave an email it is encrypted at rest and opened only to answer you — never shared, never used for anything else. It is erased 30 days after we resolve this (or 180 days if it is still open) without you asking, and you can erase it sooner at any time; either way your correction stays, anonymously. Leave it blank and your request is fully anonymous from the start (we store no IP address either way).

Descriptive, cited, not legal advice; ratings are versioned and corrections create a new version. Data from the IoT Info Grabber DB research project, CC BY-SA 4.0.

← Back to the IoT Privacy Database