eufy Home Security Cameras
Hardware · In January 2025, the New York Attorney General secured a $450,000 settlement after finding that eufy's video streams were not end-to-end encrypted and could be accessed without aut…
Every published Beacon rating, newest first. Each entry is a citable artifact with named sources and an open right-of-reply.
55 ratings
Missing something? Request a Sovereign Beacon™ rating →
Hardware · In January 2025, the New York Attorney General secured a $450,000 settlement after finding that eufy's video streams were not end-to-end encrypted and could be accessed without aut…
Hardware · GrapheneOS is a hardened, open-source Android operating system that provides a tracking-free environment by disabling background telemetry and advertising IDs by default. It implem…
App · Despite transitioning to U.S.-based management in January 2026, TikTok's updated privacy policy has introduced expanded collection of precise location data. Additionally, the app c…
App · Signal remains the gold standard for secure messaging in 2026, offering audited, end-to-end encryption by default for all communications and utilizing Sealed Sender technology to h…
AI App · In May 2025, Italy's data protection authority (Garante) fined Replika's developer, Luka Inc., 5 million euros for serious GDPR violations, including processing sensitive personal …
AI App · Jan.ai is an open-source, local-first personal AI chat application that runs entirely on the user's hardware by default. It processes all conversations and documents locally, ensur…
Site · Tractor Supply Company's website was fined a record $1.35 million by the California Privacy Protection Agency in September 2025 for serious CCPA violations. The site failed to hono…
Site · Plausible Analytics is an open-source, GDPR-compliant web analytics platform designed to offer detailed metrics without using cookies or collecting personally identifiable informat…
Hardware · Apple Vision Pro introduces severe surveillance risks due to its vast array of always-on sensors, including multiple depth sensors, microphones, and 12 cameras. Although eye-tracki…
Hardware · Framework laptops are engineered with a heavy emphasis on user privacy, the right to repair, and open-source compatibility. By default, they feature physical hardware kill switches…
Site · Amazon's e-commerce platform relies on aggressive cross-site tracking and opaque data processing practices to build extensive behavioral profiles for targeted advertising. This sys…
Site · DuckDuckGo operates as a privacy-first search engine that actively mitigates cross-site tracking by refusing to store search history, collect IP addresses, or build personalized us…
AI Platform · Ollama is an open-source, local-first framework that allows organizations to run large language models (LLMs) entirely on their own hardware. It processes all prompts and data loca…
AI Platform · By default, OpenAI's consumer-facing ChatGPT and Plus accounts actively utilize user chats, uploaded files, and personal inputs to train future models. Unless a user manually navig…
Privacy Law · The California Privacy Rights Act (CPRA) is widely considered the strongest consumer data privacy law in the United States. It provides robust, enforceable consumer rights, includi…
Privacy Law · The Utah Consumer Privacy Act (UCPA) is heavily criticized by digital rights advocates for prioritizing business interests over consumer safety. It fails to mandate fundamental dat…
Privacy Law · Passed as one of the earliest state-level frameworks, the VCDPA is rated RED by privacy advocates because it was heavily influenced by industry lobbyists and serves as the template…
Privacy Law · The ICDPA is rated RED as it is one of the weakest state privacy laws passed in the United States. Unlike stronger statutes, it denies consumers the fundamental rights to correct i…
Hardware · YubiKey is a physical cryptographic security key that executes authentication operations entirely on-chip within its secure element. The hardware has zero network capabilities, doe…
Hardware · The Purism Librem 5 is a security-focused smartphone that operates completely on local user-owned hardware with no mandatory cloud integrations. It features physical hardware kill …
AI App · PrivateGPT is an open-source AI application designed to provide a completely offline conversational interface for document analysis. Since the application, embedding database, and …
App · Mullvad VPN is an application and routing service designed with absolute privacy-by-design principles, requiring no email address or personal details to register. Although it route…
App · Bitwarden is an open-source credential manager that secures all user data with zero-knowledge, client-side encryption before syncing to the cloud. Its software architecture is full…
Site · ProtonMail provides zero-access encrypted email storage, meaning messages are encrypted client-side before being written to Proton's Swiss-based servers. An independent cryptograph…
Site · Brave Search is an independent search engine that operates on its own proprietary web index without building user behavioral profiles or tracking queries. The platform serves searc…
App · Apple's macOS operates locally but automatically prompts users to sync highly sensitive personal files, photos, and keychains to iCloud servers under default settings. In January 2…
AI App · Perplexity AI is a conversational search engine that depends entirely on continuous cloud extraction and real-time indexing of web content. Its default terms allow the collection o…
App · Temu is an e-commerce application that operates on a business model driven by aggressive data extraction and consumer tracking. A June 2023 US Select Committee report highlighted m…
Hardware · Flock Safety's surveillance systems force constant video, situational telemetry, and audio captures straight to a unified vendor cloud. The hardware functions with zero standalone …
Hardware · The PinePhone Pro places ultimate hardware control back in user hands. Beneath its removable rear case sit six physical DIP switches capable of disconnecting circuit lines for the …
App · Threema uses an architecture that generates a unique, anonymous 8-digit Threema ID for each client instance, ensuring messaging maps and profile networks are isolated from cellular…
App · Adobe's modern software stack features mandatory integrations with its centralized Creative Cloud environments. Deep investigations into Adobe's service agreements reveal that stan…
AI Platform · AnythingLLM functions completely isolated from vendor network arrays. All contextual documents, chat interaction histories, and embedded databases are maintained within the local d…
AI Platform · Midjourney lacks any local computing architecture, channeling all client image synthesis loops through commercial cloud rendering clusters. Its basic operating policies permanently…
Site · SearXNG establishes a proxy barrier between individual seekers and commercial web indexing structures. It discards user profile paths completely, omitting contextual search logs an…
Site · LinkedIn utilizes a cloud framework optimized to chart behavioral networks. Policy reviews disclose that the platform deploys standard opt-out configurations for corporate AI model…
Privacy Law · The EU AI Act safeguards user autonomy by declaring automated biometric and predictive scoring architectures as 'unacceptable risks,' rendering them entirely prohibited across the …
Privacy Law · Section 702 serves as a sweeping domestic spy tool, compelling commercial electronic communication service providers to pipeline data signals to intelligence databases without indi…
App · Telegram's privacy posture has significantly weakened, particularly after its September 2024 privacy policy update. The company now explicitly states it "may disclose your IP addre…
App · Shein is a significant privacy threat due to a history of data mismanagement and regulatory non-compliance. In June 2018, its then-parent company, Zoetop, suffered a data breach af…
AI App · DuckDuckGo AI Chat is designed with strong privacy protections, ensuring conversations are not used for AI model training and personal information like IP addresses is removed befo…
App · Firefox Focus is designed with privacy in mind, offering features like tracker blocking and clearing browsing data. Its privacy notice (S0, effective April 22, 2025) states that "Y…
AI App · RoomGPT is rated yellow due to its data collection and sharing practices, which present potential privacy risks for users. The privacy policy (S0) states that personal information,…
Site · Acxiom, a data and marketing company, poses a significant threat to user privacy due to its extensive data collection and sharing practices. In 2002-2003, the company experienced a…
Site · Fathom Analytics is a privacy-first web analytics solution, designed for GDPR and ePrivacy compliance by not using cookies or fingerprinting for tracking (2019). It avoids persiste…
Hardware · Microsoft Pluton, announced in November 2020, is a security processor integrated directly into the CPU, designed to protect credentials, identities, personal data, and encryption k…
App · BetterHelp has a history of sharing sensitive user data for advertising purposes. In March 2023, the Federal Trade Commission (FTC) settled with BetterHelp for $7.8 million over al…
Privacy Law · The Delaware Personal Data Privacy Act (DPDPA), signed into law on September 11, 2023, significantly enhances consumer privacy by granting residents rights to access, correct, dele…
Site · X Corp. (formerly Twitter) has a history of privacy failures and a privacy policy that permits extensive data collection and sharing. In May 2022, Twitter agreed to a $150 million …
Site · Startpage is a privacy-focused search engine that explicitly states it does not collect personal data for searches. Since 2009, it has not recorded IP addresses, and its policy con…
AI App · Llama.cpp, despite its local-first design, poses a significant privacy threat due to numerous critical security vulnerabilities. For instance, in April 2024, a remote code executio…
Privacy Law · Montana Senate Bill 375 (SB 375), passed in 2025, primarily regulates the sale of edible hemp products containing THC and does not contain specific provisions related to user priva…
Hardware · Ring is a significant privacy threat due to a history of severe security failures and internal misuse of customer data. In May 2023, the FTC filed a complaint, leading to a $5.8 mi…
Hardware · System76 demonstrates a strong commitment to user privacy, explicitly stating in its 2026 privacy policy update that it "does not sell your data." The company's Pop!_OS operating s…
App · Vivaldi Browser is rated green due to its strong commitment to user privacy, highlighted by its "zero-tracking policy" and explicit statement in its privacy policy (last updated De…