← IoT Privacy Database

August / Yale Smart Lock

August Home (ASSA ABLOY) · Smart Lock

✓ Reviewed

2.6Surveillance
Index
Policy — what its policy permitsC
Evidence — what research provesB

The lock logs every entry and exit and the identity of everyone granted access - household members, guests, cleaners, delivery workers - creating a precise occupancy and who's-home record tied to your door. August collects name, email, phone and details about other people with access, and may share information with ASSA ABLOY-affiliated organizations. Core lock/unlock works over local Bluetooth without the cloud, but WiFi features and remote access route through August's servers and require an account.

Why this rating

Policy is docked for collecting entry/exit logs plus the identities of guests and service providers who never consented (sensitive-collection), vague retention, unilateral changes and arbitration, offset by a genuine local-Bluetooth offline mode that keeps the core lock functional without the cloud (local-processing credit). Evidence draws on Mozilla's Privacy Not Included review, which credits August for not selling personal data but rates its data-protection track record 'Needs Improvement' over an August Connect WiFi-bridge vulnerability reported December 2019 that researchers said may have gone unfixed (security-negligence, >5yr so half-weighted).

What it is

Manufacturer
August Home (ASSA ABLOY)
Category
Smart Lock
Model years
2020-present
Market status
Current
Companion app
August Home / Yale Access

The evidence 1

Independent research, regulatory action, lawsuits, breaches and journalism about this device — the "what actually happens" axis. Each links to its source.

  1. Ngo review · Mozilla Foundation (*Privacy Not Included) · 2021-11

    Mozilla notes August collects data on everyone with lock access, shares with ASSA ABLOY affiliates, and flags an unresolved August Connect WiFi vulnerability, rating data protection 'Needs Improvement.'

    Why it matters here: Independent privacy assessment specific to these locks, covering both the who-has-access data collection and a real security disclosure.

Descriptive, cited, not legal advice; ratings are versioned and corrections create a new version. Data from the IoT Info Grabber DB research project, CC BY-SA 4.0.

← Back to the IoT Privacy Database