A cleaning appliance that maps your floor plan — on purpose
Does your robot vacuum photograph your home — and where do those images go?
Newer robot vacuums use a built-in camera to recognize obstacles and build a map of your home, which is the point of the feature, not a defect. Two separate, documented cases show what can happen after that: a company's own data pipeline, and a plain security hole. Invasive, not malicious — neither case was a device built to spy on you specifically.
Case one: a data-labeling pipeline, not an intruder (2022)
MIT Technology Review reported in December 2022 that iRobot — maker of the Roomba — had hired a data-labeling company called Scale AI to help train the obstacle-avoidance AI on its Roomba j7 models. Scale AI, in turn, used subcontracted gig workers, including some in Venezuela, to label the raw images. A batch of those images ended up posted to a private Facebook group and a Discord server; of fifteen images the reporters obtained, several were ordinary rooms, but one showed a woman sitting on a toilet with her face clearly visible, and another showed a child on the floor, face also visible. iRobot's response: the robots that captured those images were special data-collection units given to paid testers and employees, not vacuums sold in stores, and the company said it ended its relationship with the responsible vendor. Worth being precise about: this was a training-data pipeline, built to improve the product, that lost control of its own output — not a company photographing customers on purpose.
Case two: a security flaw, not a design choice (2024)
A different kind of risk surfaced in August 2024, when security researchers Dennis Giese and Braelynn Luedtke presented findings at the DEF CON 32 conference about vulnerabilities in Ecovacs Deebot robot vacuums and lawnmowers. The flaws they described could let an attacker reach a unit's built-in camera and microphone remotely, and in some cases speak through its onboard speaker, by exploiting a weak PIN or an insecure network connection. ABC News later demonstrated the risk directly, watching a staffer work in a Minneapolis office through a compromised Deebot and speaking to him through it. Giese said he'd flagged some of the issues to Ecovacs as early as December 2023; as of the researchers' later statements, some holes reportedly remained even after a patch. This is the more familiar kind of risk — a bug, not a business decision — but it means the camera on a robot vacuum is a real attack surface, the same as a baby monitor or a doorbell camera.
What to actually check on your own unit
- Look for an AI-improvement or "help us improve" data-sharing toggle in the robot's app — this is usually a separate setting from the cleaning schedule, and it's sometimes on by default. Turning it off stops your images from being used to train the company's models going forward.
- Check whether images are processed on the device or uploaded to the cloud. Some manufacturers claim on-device processing with images discarded immediately; that claim is the company's own, not an independently audited fact, so weigh it accordingly.
- Turn off remote live-view and two-way audio if you don't use them. If the feature that lets you check in on a pet through the app isn't something you actually use, an attacker can't reach through a feature that's switched off.
- Use a unique password and two-factor authentication on the account, and keep the app and the robot's firmware current — the Ecovacs flaw was only closed, for the units it was closed on, by an update.
- Before buying a new one, a camera-equipped model's privacy practices are worth checking independently rather than taking the box copy at face value.
What this doesn't fix
None of the above un-leaks an image that already left the device, and none of it independently verifies a manufacturer's claim about where processing actually happens. These steps limit future exposure; they don't audit the past or the vendor's engineering. If a specific model concerns you, the manufacturer's current privacy policy — not a review site's summary of it — is the document to actually read before you buy.
A robot vacuum is a device you chose to bring in. Worried about one you did not? That is the other half of this site.
The field manual covers finding a camera someone deliberately hid. This page covers a camera you knowingly own, built into an appliance — different problem, same calm approach. The complete system — every check on this site plus the ten-minute walkthrough, audio devices, your legal rights, and what to do if you find something. 47 printable pages, instant download, keep it on any device.