← IoT Privacy Database

Flo by Moen Smart Water Shutoff

Moen (Fortune Brands Innovations) · Smart Water / Utility

Staff Reviewed — a person at DeSpy reviewed this rating.

4.4Surveillance
Index
Policy — what its policy permitsD
Evidence — what research provesD

Flo meters water flow through the whole house at fine resolution, which is exactly the signal needed to infer when people shower, wake, sleep, leave and return - a detailed occupancy and routine fingerprint - and it retains up to three years of that usage history. Moen's policy allows sharing aggregated/anonymized water-use data with partners and publishing community trends, and supports opt-in integrations that transfer data to third parties including insurance providers. Independent privacy scrutiny of the device is minimal, so the evidence picture is thin.

Why this rating

Policy is penalized for high-resolution whole-home water telemetry that reveals daily routines and occupancy far beyond leak detection (sensitive-collection), a multi-year retention window (indefinite/long retention), vague sharing language, unilateral changes and arbitration; opt-in insurance/third-party integrations add disclosure risk. Evidence is capped and confidence low because the practices come essentially from Moen's own policy with no meaningful independent privacy or security coverage of the device - effectively unstudied - so the evidence score is held at or below 60 and no incident was fabricated.

What it is

Manufacturer
Moen (Fortune Brands Innovations)
Category
Smart Water / Utility
Model years
2020-present
Market status
Current
Companion app
Flo by Moen
Are you the maker? Respond to this finding

Free. There is no paid or faster path, and nothing about a rating is for sale. Prove you control your company's domain with one DNS record; a person then reads your statement beside our finding and decides whether to publish it.

An email is encrypted at rest and opened only to answer you; it is erased 30 days after we resolve this (or 180 days if still open), and you can erase it sooner. Unproven filings are deleted after 14 days.

Think something here is wrong?

Evidence and research improve when people push back. Tell us what to re-check — a misattributed domain, an outdated classification, a claim about your own app — and a human will review it. Responses can take up to 30 days.

If you leave an email it is encrypted at rest and opened only to answer you — never shared, never used for anything else. It is erased 30 days after we resolve this (or 180 days if it is still open) without you asking, and you can erase it sooner at any time; either way your correction stays, anonymously. Leave it blank and your request is fully anonymous from the start (we store no IP address either way).

Descriptive, cited, not legal advice; ratings are versioned and corrections create a new version. Data from the IoT Info Grabber DB research project, CC BY-SA 4.0.

← Back to the IoT Privacy Database