Old Nest thermostats still send data to Google after support ended

Google officially shut down the remote control features of the first and second generation Nest Learning Thermostats last month. Many owners believed that the devices would stop communicating with Google once the company removed the smart features.

New research, however, shows that these early Nest devices continue to upload detailed logs to Google even though support has ended.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive offers straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM bulletin.

Early Nest Learning thermostats still send sensor data to Google even after losing remote functionality. (Google)

Researcher discovers unexpected data downloads from old Nest devices

Security researcher Cody Kociemba discovered this silent data stream after digging through the backend as part of a repair bounty challenge organized by FULU, a right-to-repair group co-founded by electronics repair expert and YouTuber Louis Rossmann. The challenge asked developers to restore lost smart features to unsupported Nest devices. Kociemba partnered with the open source community and created No Longer Evil, software that restores smart functionality to these aging thermostats.

While he was cloning Google’s API to build the project, he suddenly received a flood of logs from customer devices. This surprise led to a closer look at what Google still collects.

Researcher Cody Kociemba discovered ongoing data downloads while creating a tool to restore smart functions. (Google)

What Nest thermostats keep sending to Google

Even though the remote no longer works, Kociemba found that early Nest Learning Thermostats still upload a constant stream of sensor data to Google. This includes:

• Manual temperature changes
• If anyone is in the room
• When sunlight hits the device
• Temperature readings
• Humidity Levels
• Movement activity
• Ambient light data

Kociemba says the volume of logs was significant. He disabled incoming data because he didn’t expect the devices to remain connected to Google after shutdown.

Google previously said unsupported models would “continue to report logs for issue diagnostics.” However, Kociemba points out that Google can no longer use this data to help its customers because support is completely interrupted. This makes the continuous flow of data even more confusing.

AI FAULT LEAKED GMAIL DATA BEFORE OPENAI PATCH

CyberGuy reached out to Google for comment, and a spokesperson provided us with the following statement:

“The Nest Learning Thermostat (1st and 2nd generation) is no longer supported in the Nest and Home apps, but temperature and schedule adjustments can still be made directly on the device. These devices will soon be unlinked and removed from all user accounts.

Thermostats continue to provide temperature, motion, and light data even though official support has ended.

Why this discovery is important

Google has removed access to remote control, security updates, software updates, and health checks through the Nest and Google Home apps. Owners can no longer rely on devices for key smart features. Yet thermostats continue to transmit data to Google, creating a one-way connection that helps the business more than the customer.

Users do not benefit from logs because support has been discontinued. Google cannot use these logs to diagnose problems or offer help. This raises questions about transparency and user choice for people who thought the connection was over.

The FULU bonus that triggered the discovery

FULU’s bounty program encouraged developers to create tools to restore functionality to devices abandoned by their manufacturers. After reviewing the submissions, FULU awarded Kociemba and another developer known as Team Dinosaur the highest bounty of $14,772 for bringing smart features back to early Nest models.

Their work highlights how community-led repair efforts can keep useful devices alive. It also reveals how companies manage device data long after official support has stopped.

How to stay safe if you’re still using an old Nest thermostat

If you keep one of these unsupported Nest thermostats on your network, there are a few simple steps you can take to protect your privacy. These tips help reduce what the device sends to Google and reduce your exposure.

1) Check your Google account activity

Start by checking what Google has associated with your home devices. Visit myactivity.google.com and look for any thermostat logs or events you don’t expect.

2) Place the device on a separate Wi-Fi network

A guest network keeps the thermostat away from your main appliances. This limits what the thermostat can reach and helps prevent wider access.

3) Block outgoing traffic when possible

Some routers allow you to block individual devices from sending data to the Internet. This cuts off log downloads while letting the thermostat control the heating and cooling.

4) Disable all remaining cloud features

If the device menu still offers cloud settings, turn off anything related to remote access or online diagnostics. Even partial controls help reduce data flow.

5) Remove old device associations from your Google account

Check your connected devices in your Google settings. Delete any old Nest entries that no longer serve any purpose. This stops the remaining links that can still send data.

6) Adjust router settings that report device scans

Some routers send scans back to the router manufacturer. Disable cloud diagnostics to reduce the footprint of unsupported smart products.

7) Plan your replacement

Unsupported devices lose security updates. If you are unable to isolate the thermostat on your network, consider upgrading to a model that always receives patches.

Pro tip: Reduce your footprint with a data deletion service

A data deletion service can help you reduce the amount of personal information available to data brokers. This adds another layer of privacy that supports your smart home security.

Although no service can guarantee the complete removal of your data from the Internet, a data deletion service is definitely a wise choice. They’re not cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically deleting your personal information across hundreds of websites. This is what gives me peace of mind and has proven to be the most effective way to erase your personal data from the Internet. By limiting the information available, you reduce the risk of fraudsters cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.

Check out my top picks for data deletion services and get a free scan to find out if your personal information is already available on the web by visiting Cyberguy.com.

Get a free analysis to find out if your personal information is already available on the web: Cyberguy.com.

MORE THAN 2 billion users face phishing risks after Google data breach

Take my quiz: How safe is your online security?

Do you think your devices and data are truly protected? Take this quick quiz to see where your digital habits stand. From passwords to Wi-Fi settings, you’ll get personalized analysis of what you’re doing right and what needs improvement. Take my quiz here: Cyberguy.com.

Kurt’s Key Takeaways

The discovery that older Nest thermostats are still sending data to Google long after losing their smart features gives homeowners a reason to take a closer look at their connected home. Unsupported devices can continue to communicate with servers even when the useful side of the relationship ends. Understanding what your gadgets share helps you make informed decisions about what stays on your network.

Would you continue to use a device that still sends data to its manufacturer even after losing the features you paid for? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive offers straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM bulletin.

Copyright 2025 CyberGuy.com. All rights reserved.