Guides
Privacy and Data: What a Floor Robot Can Record
What a connected robot vacuum may map, photograph, or send to the cloud, how to use official privacy controls, and how to lock down the account — without scare stories or invented telemetry.
How to read this guide. Privacy practices differ by brand and by model, and they change when policies are updated. The detailed examples below come from iRobot’s current public privacy policy and support articles. Treat them as a worked example, then read the policy and in-app toggles for your robot. We have not audited any company’s servers.
A robot vacuum is a moving computer with a map of your home, a Wi-Fi radio, and, on some models, a camera. That is useful. It is also a good reason to know what the machine can collect, what leaves the robot, and which switches you actually have.
This is not a claim that “robot vacuums spy on you” in the abstract, and it is not a claim that they collect nothing. The honest middle is in the manufacturer’s own privacy documents: maps and usage data often go to a cloud so the app can work; camera images, when they exist, are usually on a stricter, opt-in path; and you can often disable mapping features if you are willing to give up room-by-room control.
If you are choosing a robot now, privacy is one line on the buying framework, next to docks and floors. If you already own a Roomba and are here because of the 2026 ownership change, read this together with what Roomba owners should know after the sale.
What these machines can collect
Not every robot has every sensor. A lidar-only vacuum without a front camera does not take photographs of your hallway. A camera-equipped model can, if you allow it. Our LiDAR vs. camera guide is about how those sensors navigate; this section is about what data that creates.
iRobot’s public materials are unusually specific, which is why they make a good example — not because other brands are automatically the same.
Usage data. On Wi-Fi-connected iRobot machines, usage information such as how long a job ran, how far the robot went, and whether it hit error codes can be sent to the cloud so it can appear in the mobile app. iRobot’s older privacy FAQ also stated that images used for navigation are not sent to the cloud as a matter of course, and that map data is sent for processing if the owner agrees to have the map viewable in the app (iRobot privacy and data-sharing FAQ; confirm the current US policy below).
Maps. If you use Smart Maps, iRobot’s support article on Imprint map privacy says map data is stored in the cloud, not on the phone, and is tied to individual robots. Maps remain if you uninstall the app; you will need a new map if you factory-reset the robot or replace it. The same article tells you how to turn Mapping Features off in the app: Accounts → Privacy → Mapping Features → your robot. Disabling Mapping Features “will stop the robot from sending any spatial data to our cloud-based servers,” and it will also disable mapping-related app features, including previous schedules and favorites, time estimates, directed room cleaning, targeted zone cleaning, and keep-out zones (Imprint Smart Maps: Data Privacy). That is the real trade-off: less spatial data in the cloud, less convenient cleaning.
Obstacle images, on camera models. Some Roomba models can photograph obstacles so you can review them in the app. iRobot’s support article on Camera, PrecisionVision, and Obstacle Image Review says allowing the robot to capture those images is up to you; captured images are encrypted and stored so they are only viewable by you or others with access to your iRobot account, through the mobile app. “iRobot cannot view or access your images unless they are contributed to the image database.” If images are not contributed, “encrypted images are automatically deleted from our servers after 30 days” (Camera, PrecisionVision, and Obstacle Image Review). A companion article says contribution is per image: checking “Contribute to Database” under a given image allows iRobot development teams to view and use that image; if you leave the box unchecked, the image stays encrypted and is deleted after 30 days, and “no iRobot employee or representative will have any access to images that are not explicitly shared.” If you never review the images, they are not shared and are deleted in 30 days (Contribute to Database).
iRobot’s US privacy policy annex describes the same idea in policy language: images from certain connected robots with camera-based navigation are collected if you opt in, and are not viewable by iRobot unless you also opt in to sharing each image. The same annex mentions live-streamed video as a fully opt-in feature that, in iRobot’s description, is not stored (US Privacy Policy, Annex 1). Read the live policy; annex URLs and wording can be updated.
Other brands have their own policies, camera toggles, and retention periods. Do not copy iRobot’s 30-day figure onto a Roborock, Dreame, Ecovacs, Eufy, or Shark robot. Open that brand’s privacy policy and the robot’s camera or “photo review” setting and look for the same questions: Is the camera off unless I opt in? Who can see an image? How long is it kept? Can I delete it?
Account and network hygiene
The map is only as private as the login that can see it. A shared family tablet with a saved password is a larger risk than a lidar map sitting in a vendor cloud with mapping turned off.
Practical steps, most of which are ordinary account security and also show up in federal guidance on internet-connected devices:
- Use a unique password for the robot’s app account, not the same password as email or a retailer login. CISA’s consumer guidance on securing Internet of Things devices specifically flags default and reused passwords as a weak barrier, and tells users to choose strong passwords, apply patches promptly, and review device settings after setup or updates (CISA, Securing the Internet of Things).
- Turn on two-factor authentication if the app offers it.
- Keep the app and robot firmware updated. Vendor patches are how known bugs get closed. CISA makes the same point for internet-enabled devices in general (CISA, IoT guidance).
- Give the robot its own Wi-Fi segment if you can. A guest network or IoT VLAN cannot fix a vendor cloud, but it limits what a compromised device can reach on your LAN. This is optional, not a requirement in any vacuum manual.
- Review voice-assistant links. iRobot’s privacy FAQ notes that customers can choose to share limited data with Amazon or Google to enable voice control, and that the data should be limited to what the service needs (privacy FAQ). If you do not use Alexa or Google to start the robot, do not link the accounts.
- Decide whether the robot needs to stay online all the time. Some models can run a physical button clean without cloud features. CISA suggests asking whether continuous internet connectivity is actually needed (CISA, IoT guidance). A robot that only needs the cloud for map edits can spend most jobs offline if the manufacturer allows it.
If you sell or retire the robot, wipe it the official way: remove it from the app account, factory-reset the robot, and, if the vendor provides an account-deletion request, use it. A dock left on the old Wi-Fi is still a device on your network.
A short decision guide
You do not have to pick “maximum data” or “no connected robot at all.”
- If you want room-by-room jobs and keep-out zones, you will usually have to allow some kind of map in the vendor’s system. Read that policy and lock down the account.
- If you want a robot that only bounces around and never draws your floor plan in an app, look at models and settings that do not require cloud maps, and accept that you will lose directed cleaning.
- If the robot has a camera, leave obstacle-image review and any live-stream feature off until you have read the toggle. If you turn review on, do not contribute images you would not want an engineer to see.
- If your concern is specifically iRobot’s 2026 change in ownership, the company’s public description of a US data-protection subsidiary is in the sale article. It does not replace the in-app switches above.
A floor robot is a household appliance that happens to make a map. Treat the map like you would treat a photo of your floor plan in an email account: know who can open it, and turn off the extras you do not use.
Sources
- iRobot, Imprint Smart Maps: Data Privacy (cloud storage, disabling Mapping Features, feature trade-offs): homesupport.irobot.com/articles/en_US/Knowledge/17752
- iRobot, Camera, PrecisionVision, and Obstacle Image Review (encryption, access, 30-day deletion if not contributed): homesupport.irobot.com/articles/en_US/Knowledge/31161
- iRobot, Contribute to Database (per-image sharing): homesupport.irobot.com/s/article/30949
- iRobot, US Privacy Policy (including camera-image and live-stream descriptions in policy annexes): irobot.com/en_US/legal/privacy-policy.html
- iRobot, Privacy and Data Sharing Common Questions: support.irobot.de/articles/en_US/Knowledge/964
- Cybersecurity and Infrastructure Security Agency, “Securing the Internet of Things (IoT)” (passwords, patches, settings, connectivity): cisa.gov