[trimtab]

Z-wave and encrypted ZigBee controlled products work pretty well for in-home automation. Communication is encrypted between devices.

The problem can be the Z-wave/ZigBee controller which may very well require Internet and Cloud access to "phone home."

I avoid using IoT devices that I can't re-program or if nothing is available except some proprietary/cloud driven device I isolate them into their own little network space, so they can't attack the rest of the network or "phone home" unless I let them. Sometimes, that isn't possible and that's when 30 day return privileges come in real handy.

The ability to trace the packets coming off of most IoT devices is fascinating and sometimes scary. A lot of devices are like the recent OnePlus smartphones that record and send most everything to their "true master" the manufacturer of the device. At least, with a Oneplus you can fix that, by reflashing the phone.... which is not true of most IoT devices being sold today.

Have you noticed that BestBuy seems to only sell IoT devices that will "phone home?"

[firefoxd]

You gotta have a link for what you said about the OnePlus.

[alexland]

There was a post on /r/Android about it [1], but it seems like you can toggle this off by disabling device analytics in the settings.

[1]: https://www.reddit.com/r/Android/comments/75ev0z/oxygenos_is...