Samsung SmartThings
Samsung Electronics · Smart-Home Hub / Ecosystem
✓ Reviewed
Index
SmartThings sits at the center of the home and aggregates telemetry from every paired device - lights, locks, cameras, sensors, appliances - into one Samsung account. Because it correlates motion, door, presence and geofence signals across the whole house, it can infer occupancy, daily routines, and precise home location even though the hub itself has no mic or camera. A Samsung account is mandatory and most automations round-trip through Samsung's cloud, though newer Edge drivers can run some routines locally on the hub.
Why this rating
Policy loses points for whole-home aggregation of occupancy/location-revealing sensor data beyond the need of any single device (sensitive-collection), vague and open-ended retention, layered policy language that concedes 'other information not described may be collected' when third-party services are linked (policy-vagueness), reserved unilateral changes and binding arbitration in the US terms; the local Edge-execution capability earns a partial local-processing credit. Evidence reflects real independent scrutiny (Cisco Talos found 20 remotely-chainable vulnerabilities in the SmartThings Hub in 2018, now patched and >5yr so half-weighted) against an otherwise disclosed, opt-out-supported data model.
What it is
- Requires a cloud account
- Manufacturer
- Samsung Electronics
- Category
- Smart-Home Hub / Ecosystem
- Model years
- 2020-present
- Market status
- Current
- Companion app
- SmartThings
The evidence 1
Independent research, regulatory action, lawsuits, breaches and journalism about this device — the "what actually happens" axis. Each links to its source.
-
Cisco Talos disclosed 20 vulnerabilities in the SmartThings Hub, three of which could be chained for unauthenticated remote code execution on the central home controller.
Why it matters here: Demonstrates the concentrated attack surface created when a single hub aggregates and controls every connected device in a home; since patched, and >5yr old so counted at half weight.
Descriptive, cited, not legal advice; ratings are versioned and corrections create a new version. Data from the IoT Info Grabber DB research project, CC BY-SA 4.0.