A luxury home today is a network as much as it is brick, glass and square footage. Many thermostats, irrigation controllers, security cameras, wine cellar systems, pool pumps and voice assistants send data back to the company that makes them. For most homeowners, that means a patchwork of app accounts they set up during a renovation and never revisited.
In our view, that patchwork is where much of the privacy risk sits: in the number of companies that each hold a piece of the home's story.
The home as a data source
Many connected systems keep logs. A smart lock records when doors are locked and unlocked. A leak sensor records which bathroom floods every winter. A learning thermostat can infer when people are usually home. Each fact seems harmless. Combined, they can suggest when a house is empty, how it is used and who has access.
That picture builds up one device and one app account at a time, often without anyone deciding it should, until several vendors each hold part of it.
How AI assistants change the risk
Voice and chat assistants are built to answer questions, so they need context. A well-built home assistant should work from the specific records it needs, such as a warranty, a manual or a maintenance log, and should show you which ones it used.
Two broad approaches are worth telling apart:
Grounded assistants
An assistant that answers "what filter does the HVAC use" by looking up the manual you uploaded, shows you that source, and says when it doesn't have the record.
Ambient assistants
An assistant that infers answers from broad behavioral data, third-party integrations or general training data, without showing where an answer came from.
You can check the first kind. The second asks you to take its word.
Questions worth asking before you connect anything
Before you give a smart home platform or AI assistant access to your home, ask:
- Does it use my documents to train its models? If a vendor can't answer clearly, we would assume the answer is yes.
- Can I see which records the assistant used to answer a question?
- What happens to my data if I sell the house?
- Is access role-based, and who decides who gets in? A contractor, a house sitter and a spouse should not all see the same things.
- Does it store any credential that can operate a device in my home, such as a lock? If so, how is it protected, and how do I delete it?
- Where are door codes and alarm details stored, if anywhere? Often the safest answer is that they are kept out of the record entirely.
How we answer those questions for WHL Residence
- Training: when you use Astra or ask us to read a document, the relevant records or the file are sent to OpenAI. OpenAI does not use API data to train its models unless we explicitly opt in. Our privacy page names each company that processes the record.
- Sources: Astra shows the source it used for an answer. It labels both document evidence the owner has not yet confirmed and any web research it cites (a manufacturer's manual found online, for example), and is instructed to say when the record does not have the answer. It can still be wrong.
- Sale: the owner starts a transfer and the buyer accepts it. The whole record moves to the new owner, and the previous owner's and members' access ends.
- Access: each record has an owner, and members can have narrower roles. There is no self-service invite; during our controlled launch, WHL adds approved members at the homeowner's request.
- Device credentials: yes, if you use the optional Connected Home feature. It stores your Home Assistant address and an access token, and depending on your setup that token may be able to operate devices, including locks. It is stored encrypted, readable only by our server, and deleted when you remove the connection.
- Codes: the manual has no field for door codes or alarm PINs. Free-text notes and uploaded documents could still hold one, so keep codes out of both.
What this means for luxury homeowners and their agents
High-value homes tend to have more integrations, more vendors and more service providers with some form of access, which means more places for data to leak. That is a reason to keep the operational record in one place and to know exactly what it holds and who processes it.
For agents, privacy is worth raising with clients directly. A buyer who has just bought a large, complex property deserves a straight answer about who can see what.
Connected technology is useful. The question to ask of any system around it is whether it was designed with privacy in mind, and whether the company behind it will tell you plainly what it stores.
See how WHL Residence organizes a home's records and shows where answers come from →