UNWANTED CONNECTION
Who really has control of your smart home?
On the first night in his new home, Clint Basinger was unpacking a few stray boxes in the living room, when out of nowhere at around midnight, he heard a voice echoing down the hallway from the other side of the house. “Good night,” the voice said. “It’s bedtime.”
Then, he heard the sound of locks clicking. “I couldn’t do anything with the doors, all the windows were armed, all the motion sensors turned on,” said Basinger, who had spent 15 years saving up to buy the three-bedroom, split-level house in Asheville, North Carolina. “I had no clue what to do, so I just stayed locked inside the house that night.”
Turns out, the home’s previous owner had installed a smart security system that he neglected to tell Basinger about. “It was really disconcerting, being in a new place and having no control over what was happening,” said Basinger, 36, the host of a YouTube channel for retro technology and video game reviews.
These days, smart technology can be found within virtually any quotidian object in a home: televisions, fridges, voice assistants, doorbells, coffee makers, thermostats, lights, alarm clocks, vacuums, toothbrushes and more. According to a 2022 report from technology company Plume, households in the United States had an average of 20 internetconnected devices.
As our digital footprints in the home grow, the myriad apps and accounts required to control these devices also widens. All this automation creates more opportunities for people to lose access or power over aspects of the home, or, like in the case of Basinger, never gain access in the first place.
“We tell ourselves this story that our home is the thing that we can control — it’s private, it’s protected, it’s our space,” said Heather Suzanne Woods, a communication professor at Kansas State University and the author of a forthcoming book on smart homes.
But that feeling of control — even in ideal conditions, where the person is the original device owner and they have sole access to it with a password they made up — is often not much more than an illusion.
At best, when we can’t fully govern our devices, the complicated internetof-things ecosystems we’ve set up in our private spaces are annoying, timeconsuming or costly to deal with. At worst, they can become tools of abuse — allowing people with malicious intentions, who are not even physically in the home, to surveil, taunt or mentally torment those inside.
“In cases where people have separated from their partners and are no longer living together, it creates a situation where people can feel like they did all this work to get away from them, but just a click of a button can bring back that sense of helplessness,” said Lana Ramjit, director of operations at Cornell University’s Clinic to End Tech Abuse.
Eventually, Basinger got ahold of his real estate agent, who connected him to the previous owner, who finally “let me into my own house,” he said. The previous owner created a guest account for Basinger to access the system, but he still doesn’t have full administrator access.
After calling the system’s manufacturer, Vivint, Basinger learned he had to install an entirely new system to have full control over it because the current one would soon be phased out. Having gone through so much trouble with the setup, the thought of getting another one didn’t sound very appealing to Basinger, so he decided to leave it as is. Now, he can control most aspects of his home (for example, what time it tells him to go to bed — a service that he’s opted out of altogether), but not all (he’s unable to change where the devices are in his home).
On one of the first days in the fall of 2019, Aaron Barden came home to find that the temperature inside his house was 78 degrees. “It was incredibly hot, and I was just wondering, ‘What’s going on?’ ” said Barden, 32, an engineer living in New Hope, Minnesota. “That’s when I realized there was already programming in the smart thermostat.”
Barden had moved into the house a few months prior and had noticed that there was a Honeywell smart thermostat installed, but he didn’t think much of it at the time. He later learned that the previous owner had a custom heating and cooling schedule programmed in the thermostat.
“I tried to get remote access to it, because I was thinking to myself, it’d be nice to be able to just remotely set my thermostat to whatever I want,” Barden said. “Except I couldn’t do that because the thermostat had a registration code, which was associated with the account of the previous homeowner.” Though it was a time sink, Barden eventually figured out how to cancel the schedule and manually change the temperature settings on the physical device to his own preferences.
Barden reached out to Honeywell’s customer service department, which asked him to fill out a form to undo the association between the thermostat and the previous owner’s account. “But by the time I got to that point,” he said, “I figured out how to just do all the programming locally and not have it connect to the internet. So I didn’t really bother.”
The ability for others to control smart devices is “fairly implicit in the current design of many smart homes. It’s a feature, rather than a bug,” Woods said.
“Full control over one’s smart home is, at least in the present tense, an impossibility,” she said. “Part of that is because the whole purpose of a smart device is to give up control to someone or something.”
And then the darker side of smart living can emerge, with every nook and cranny of our domestic spaces filled with gadgets and gizmos.
Lindsey Song, a co-chair of the New York Cyber Abuse Task Force and the deputy director of Courtroom Advocates Project at Sanctuary for Families, said she’s observed an uptick in smart home devices being used in cases of domestic abuse.
“There’s been a rollout of so many different technologies in the homes that are really beneficial, but also extremely invasive. We constantly see this utilized against survivors whose abuser has left the home and yet the abuser is still connected to them in that way,” Song said. “They’re still able to access their devices, accounts and information.”
Shamima Ahmed, 40, was talking on the phone in her living room when she noticed a blinking red light on the ceiling. It was a security camera, one of several more she would discover, placed by her husband at the time. The court had placed an order of protection barring Ahmed’s husband, who physically and mentally abused her, from entering the home, but the cameras were his way of surveilling her from afar.
She felt acutely aware that every move she made could be tracked and that even when her abuser wasn’t home and was legally required to stay away, he still had a presence. “I felt like I couldn’t talk. I lived in my home like I was a prisoner,” said Ahmed, a hair and makeup artist in Queens.
Now divorced, Ahmed moved into a new home of her own, but the fear and feeling of being watched persist. At first, “I couldn’t sleep,” Ahmed said. “I still get panicked sometimes, and it took a while, but I told myself, ‘This is my house, this is my safe place.’ ”
“Full control over one’s smart home is, at least in the present tense, an impossibility. Part of that is because the whole purpose of a smart device is to give up control to someone or something.” — Suzanne Woods, a communication professor at Kansas State University