Robot vacuums have a big privacy problem

Twenty years ago, uttering the phrase “your vacuum cleaner might be spying on you” would have made you sound like a tin-foil hat conspiracy theorist, but it’s a real concern in 2026. For years now, there have been numerous stories about Wi-Fi-enabled robot vacuum cleaners capturing and sharing images without the user’s consent, with one particularly disturbing example involving photos of a woman using the toilet ending up online.

Privacy isn’t the only reason robot vacuums aren’t worth it, but it’s a major reason. Robot vacuums have always had sensors for navigation, but newer ones often use GPS and (on higher-end models) cameras to map your home, identify obstacles, and collect usage data. Connecting your vacuum cleaner to Wi-Fi means all of this data could potentially be uploaded to the cloud and, as with other smart home devices, is vulnerable to hackers. This puts sensitive information such as the layout of your home and your daily routine, as well as potentially identifiable images of your family and furniture, at risk.

But somehow the situation gets worse. In a 2020 study, researchers from the National University of Singapore and the University of Maryland revealed that it was possible to manipulate a robot vacuum’s sensor so that it picks up sounds through vibrations, essentially turning it into a microphone that could be used to spy on you. That’s why even the most dedicated smart home users should think twice before adding one to their home.

In the aforementioned case where a robot vacuum captured images of a woman on the toilet, manufacturer iRobot claims that the user was part of a development test and had consented to the collection, sharing and use of data for AI training by an outside company. However, iRobot declined to share the exact terms of the deal, and whatever they were, it seems likely that the end result was not what the woman expected. The images were then posted to a private Facebook group by an iRobot employee or contractor of the AI ​​company.

Perhaps even more worrying is an incident in which a software engineer was able to access audio, maps and even live camera feeds from around 7,000 DJI Romo vacuums using a PlayStation 5 controller and the help of an AI coding assistant. After discovering the massive security flaw, the man shared his findings with The Verge, but these two privacy breaches illustrate the problems with things like robot vacuums and other Internet of Things devices.

When you set up smart home devices, you’re not just providing your information to the companies behind your gadgets. It stands to reason that while it’s possible for one person to accidentally hack thousands of devices, it’s also possible for bad actors to get their hands on them. If you’re lucky, someone ends up alerting the media to pressure the manufacturer to fix the problem. If you’re not so lucky, you might literally find yourself browsing the internet with your pants down.

If you still want a robot vacuum, there are safer ones, although the options are dwindling. According to Consumer Reports, iRobot has the most robust security measures, including regular updates, a bug reporting program, and (likely the result of its past problems) policies regarding employee access to user data. However, the company went bankrupt in late 2025 and was acquired by Shenzhen Picea Robotics, previously a key manufacturing partner. iRobot CEO Gary Cohen has tried to assure consumers that their data is fully encrypted and kept on U.S.-based servers, but its Bug Bounty program hasn’t been updated since 2025, which isn’t an encouraging sign.

While there is still understandable skepticism towards iRobot at present, lesser-known brand Matic has put data security at the center of its branding, calling privacy a “fundamental, non-negotiable right.” Matic vacuums aren’t cheap, starting at $1,495, but they’ve received positive reviews from outlets like Wirecutter and Wired.

It’s also important to mention that earlier this year, the Federal Communications Commission (FCC) announced a ban on foreign-made robot vacuums and other robotic devices, which follows a similar ban on Internet routers. However, this hasn’t really impacted availability yet, as models already approved by the FCC aren’t affected, and that would include some that haven’t been released yet.