← IoT Privacy Database

Nanit Smart Baby Monitor

Nanit, Inc. · Baby Monitor

Staff Reviewed — a person at DeSpy reviewed this rating.

4.4Surveillance
Index
Policy — what its policy permitsD
Evidence — what research provesC

Nanit is an overhead camera baby monitor that records continuous video and audio of an infant's crib and, via a patterned 'Breathing Wear' garment, tracks the baby's breathing motion - highly sensitive data about a child. It requires an account and a mandatory cloud connection (breathing and sleep analytics are baked into the firmware and cannot run locally), and collects parent and baby profile data (names, baby's DOB and gender, photos), room temperature/humidity, Wi-Fi network name, IP and geolocation. Data feeds a machine-learning 'Insights' program that independent reviewers note users cannot opt out of.

Why this rating

Policy: extremely sensitive infant audio/video and breathing/biometric data (-15), a cloud-dependent design where core and subscription (breathing/Insights) features require an account and Nanit's servers (-10), indefinite retention (-8), plus arbitration and unilateral-change terms; encryption-in-transit and claimed audits provide modest offset. Evidence: largely unstudied - no confirmed breaches, regulatory actions or adversarial security research - so the evidence axis is treated as unstudied and capped.

What it is

Manufacturer
Nanit, Inc.
Category
Baby Monitor
Model years
2016-present
Market status
Current
Companion app
Nanit

The evidence 1

Independent research, regulatory action, lawsuits and journalism about how this device handles personal data — the "what actually happens" axis. Each links to its source.

  1. S2Nanit Pro Camera Baby Monitor Review
    Ngo review · Consumer Reports · 2024-01

    Independent consumer product testing of the Nanit Pro; the monitor depends on a Wi-Fi/internet connection and companion account for its core and subscription features.

    Why it matters here: Independent consumer testing of this device; rigorous independent analysis of its privacy behavior specifically is limited, so the evidence axis is treated as largely unstudied.

Are you the maker? Respond to this finding

Free. There is no paid or faster path, and nothing about a rating is for sale. Prove you control your company's domain with one DNS record; a person then reads your statement beside our finding and decides whether to publish it.

An email is encrypted at rest and opened only to answer you; it is erased 30 days after we resolve this (or 180 days if still open), and you can erase it sooner. Unproven filings are deleted after 14 days.

Think something here is wrong?

Evidence and research improve when people push back. Tell us what to re-check — a misattributed domain, an outdated classification, a claim about your own app — and a human will review it. Responses can take up to 30 days.

If you leave an email it is encrypted at rest and opened only to answer you — never shared, never used for anything else. It is erased 30 days after we resolve this (or 180 days if it is still open) without you asking, and you can erase it sooner at any time; either way your correction stays, anonymously. Leave it blank and your request is fully anonymous from the start (we store no IP address either way).

Descriptive, cited, not legal advice; ratings are versioned and corrections create a new version. Data from the IoT Info Grabber DB research project, CC BY-SA 4.0.

← Back to the IoT Privacy Database