Robot vacuums have quietly become one of the most data-hungry devices in the home. A model with a camera and mapping can retain a floor plan of your house, snapshots of whatever lies on the floor and, on some units, live video and audio. Where that information ends up depends entirely on the manufacturer: some keep it encrypted on the robot itself, while others upload it to a cloud server. This guide covers what these machines collect, which real-world incidents have already occurred and which settings are worth reviewing.
- Data collected: At minimum a map of your home; camera models add obstacle images and occasionally live video and audio.
- Storage split: iRobot and Ecovacs lean on cloud storage, while Roborock says images stay encrypted on the device and the cloud acts only as a temporary channel.
- Documented failures: Five incidents since 2018, from default credentials on a Diqee unit to a DJI cloud authorization flaw affecting roughly 7,000 robots.
- Practical fix: Disable obstacle photos, remote video and mapping features you do not use, and factory-reset before selling.
What a camera robot vacuum actually collects
As Kaspersky describes in its analysis of Ecovacs flaws, one of these robots is essentially a computer on wheels, usually running Linux, equipped with lidar, cameras and sometimes microphones, and permanently connected to the manufacturer’s cloud. The question is not whether it gathers data, but which data and who can see it.
The map is the baseline: it is what lets you send the robot to clean only the kitchen or mark no-go zones. Camera models go further. iRobot‘s front-camera Roombas recognize cables, pet waste and socks so they can steer around them. If you enable Obstacle Image Review, the robot photographs the obstacle and the area surrounding it so you can inspect it in the app, according to the company’s support documentation, which also notes that the Mini and 515 models carry no camera.
Roborock lists additional layers in its trust center: pet photos, video calls routed through the robot and voice commands, which the brand says most of its models process offline. One detail that appears on no box is your connection’s IP address. In the DJI Romo flaw described below, the exposed server displayed 2D floor plans of homes alongside the IP addresses tied to those households, according to DroneDJ.
On-device storage versus the manufacturer’s cloud
The differences between brands are substantial. iRobot encrypts obstacle photos so only someone with access to your account can view them; if you do not donate them to its image database, they are deleted from its servers after 30 days. Maps, however, are stored in the cloud, and uninstalling the app does not erase them. In January 2026 the company passed into the hands of its Chinese manufacturer, Picea, and announced a US subsidiary, iRobot Safe, intended to protect customer data.
Roborock says photos are stored encrypted on the robot, with the cloud serving only as a temporary channel that does not retain them. It claims to train its AI on simulated environments rather than user data, and to store information in Asia, Europe or North America depending on the registration region. Dreame‘s privacy policy points to data centers in the United States, Germany and Singapore, with EU user data held on the German server. Ecovacs‘ global policy places data on servers in the United States, with possible transfer to China; its Spanish-language version adds that the site is operated by a Chinese subsidiary and that such transfers rely on standard contractual clauses.
These are brand assertions rather than independent audits, but the design difference matters: a photo that never leaves the robot cannot leak from a server.
Five documented incidents
Privacy failures in robot vacuums are not hypothetical. In 2018, Positive Technologies found a flaw (CVE-2018-10987) in Diqee 360 units with night-vision cameras that gave an attacker full control using the default admin/888888 credentials. Between 2020 and 2022, MIT Technology Review published 15 images captured in 2020 by development Roomba J7 units, one showing a woman in a bathroom, leaked into private groups by data labelers contracted through Scale AI; iRobot responded that these were modified robots never sold, used by consenting collaborators.
In May 2024, Australia’s ABC documented several Deebot X2 units hijacked in the United States, one of which shouted racial slurs at a family; Ecovacs said it had fixed the PIN flaw, though one of the researchers who exposed it considered the fix insufficient. In August 2024, researchers Dennis Giese and Braelynn Luedtke demonstrated at DEF CON 32 that they could view the camera and hear the microphone, since the video PIN was verified only in the app and Bluetooth let them seize the robot from dozens of meters away.
In 2026, an engineer trying to control his DJI Romo with a PS5 controller discovered a cloud authorization flaw that, according to DroneDJ, exposed roughly 7,000 robots across 24 countries. DJI says it detected the issue in late January, has fixed it and found no evidence of misuse. The uncomfortable lesson: the Romo holds European ETSI EN 303 645 and EN 18031 certification, yet the certificates assess the device, while the hole was in the server.
Settings worth reviewing
The most effective step is switching off what you do not use: obstacle photos, remote video and, if you can live without them, mapping features. On iRobot, obstacle photos are disabled under Account > Privacy > Map Features > your robot > Obstacle Image Review, and the robot keeps avoiding objects. Look for the equivalent in your app. If you never use live video, turn it off, since the Ecovacs case shows a PIN can be decorative. Disabling Mapping Features on iRobot stops spatial data from reaching its cloud, at the cost of room-by-room cleaning, schedules and no-go zones.
Before selling, uninstalling the app is not enough: INCIBE recommends periodic factory resets and asking the company to delete your information, a right the GDPR grants you. INCIBE also advises a separate network for these devices, disabling UPnP on the router, a distinct strong password per device and prompt updates. Finally, on iRobot, anyone with access to your account can view images, so if you shared it with someone who no longer lives with you, change the password and close remote sessions.
The front camera solves a genuine problem, namely the robot swallowing cables or dragging pet waste across the floor, but it carries a privacy cost that few spec sheets mention. If your floors are usually clear, a camera-free model is the calmer choice; if you need one, pick a brand by what it does with images rather than by suction power. The weakest link is not always the robot either: the largest incident by volume happened in the cloud of a device holding European certificates. As long as security depends on servers you cannot see, the most reliable setting remains the dullest one: do not enable what you will not use.