← IoT Privacy Database

Chamberlain myQ Smart Garage

Chamberlain Group · Smart Lock

Staff Reviewed — a person at DeSpy reviewed this rating.

3.2Surveillance
Index
Policy — what its policy permitsD
Evidence — what research provesB

myQ turns a garage door - a primary home entry point - into a cloud-logged event stream, recording every open and close with timestamps tied to a specific home. Combined with the app's optional phone geofencing, it reveals when the household leaves and returns. The system is entirely cloud-dependent and deliberately walled off: Chamberlain cut third-party access and steers all users into its own ad-carrying app.

Why this rating

Policy is penalized for collecting entry/exit and precise-home-location signals that reveal occupancy (sensitive-collection), no in-app way to opt out of the ad/data use surfaced after the walled-garden move (no-opt-out), vague retention, unilateral changes and arbitration. Evidence is dominated by the well-documented 2023-2024 controversy in which Chamberlain blocked Homebridge/Home Assistant/HomeKit integrations - claiming security while <0.2% of users were affected - and pushed users into an app that injects ads that cover the door-open button (dark-patterns); it is a consumer-hostile/interoperability harm rather than a data breach, so the evidence axis stays relatively high.

What it is

Manufacturer
Chamberlain Group
Category
Smart Lock
Model years
2019-present
Market status
Current
Companion app
myQ

The evidence 2

Independent research, regulatory action, lawsuits and journalism about how this device handles personal data — the "what actually happens" axis. Each links to its source.

  1. Journalism · 9to5Mac · 2023-11-08

    Chamberlain cut off third-party API access under a 'security' rationale, forcing users into its own app whose ads reportedly push the garage-open button off screen.

    Why it matters here: Directly documents the walled-garden lock-in and ad-injection dark pattern that defines myQ's privacy/consumer posture.

  2. Journalism · Home Assistant · 2023-11-06

    Home Assistant removed its myQ integration after Chamberlain actively blocked access, stripping users of local/self-hosted control of their own garage.

    Why it matters here: Confirms the anti-interoperability move from the receiving platform's side, forcing users back onto Chamberlain's cloud and app.

Are you the maker? Respond to this finding

Free. There is no paid or faster path, and nothing about a rating is for sale. Prove you control your company's domain with one DNS record; a person then reads your statement beside our finding and decides whether to publish it.

An email is encrypted at rest and opened only to answer you; it is erased 30 days after we resolve this (or 180 days if still open), and you can erase it sooner. Unproven filings are deleted after 14 days.

Think something here is wrong?

Evidence and research improve when people push back. Tell us what to re-check — a misattributed domain, an outdated classification, a claim about your own app — and a human will review it. Responses can take up to 30 days.

If you leave an email it is encrypted at rest and opened only to answer you — never shared, never used for anything else. It is erased 30 days after we resolve this (or 180 days if it is still open) without you asking, and you can erase it sooner at any time; either way your correction stays, anonymously. Leave it blank and your request is fully anonymous from the start (we store no IP address either way).

Descriptive, cited, not legal advice; ratings are versioned and corrections create a new version. Data from the IoT Info Grabber DB research project, CC BY-SA 4.0.

← Back to the IoT Privacy Database