Camera · Aqara
Aqara Camera Hub G3 privacy & local-first review
Plug-in (USB-C), Wi-Fi · List price: Unverified
Last verified · 2 unverified items
43Local-First Score
how we score
how we score
At a glance
| Works without internet | Partial Partial: IR automations run without internet (per Aqara); live view offline not verified1 |
|---|---|
| Local storage | Yes Local recording (Aqara: storage functions run locally)1 |
| Home Assistant | Community only No official integration; works via HomeKit Device pairing12 Aqara exposes the G3 to HomeKit as a camera; Home Assistant can pair HomeKit cameras. |
| Open protocols | Unverified RTSP availability not confirmed on Aqara's US product page. |
| Subscription needed? | Not needed No for local storage; HomeKit Secure Video needs iCloud+13 |
| Cloud account required? | Unverified |
| End-to-end encryption | Optional Only when used with HomeKit Secure Video14 |
Score breakdown
| Works without internet | Partial | 8 / 20 |
|---|---|---|
| Local video storage | Yes | 15 / 15 |
| Home Assistant, locally | Community only | 6 / 15 |
| Open protocol (RTSP / ONVIF / Matter) | Unverified | 0 / 10 |
| No cloud account required | Unverified | 0 / 10 |
| No subscription for core recording | Not needed | 8 / 8 |
| End-to-end encryption | Optional | 4 / 7 |
| Privacy policy: does not sell your data (brand) | Qualified App policy: "We do not sell any personal information to third parties"; the US website policy shares data with advertising providers for personalized ads (opt-out offered).56 | 2 / 5 |
| Police requests: warrant or no access (brand) | Discretionary US privacy policy: discloses to law enforcement "if required or permitted to do so by law or legal process", and may disclose to prevent physical harm. No warrant requirement or user notice stated.6 | 0 / 5 |
| No incidents in our tracker, last 5 years (brand) | Incident found 2 in our tracker since Oct 2021 | 0 / 5 |
| Total | 43 / 100 |
Privacy notes
- Aqara US privacy policy: may share data with advertising providers for personalized ads on third-party sites, and lists an opt-out of targeted advertising. The Aqara Home app policy says Aqara does not sell personal information and lists data centers in mainland China, Germany, South Korea, Singapore, Russia and the US.65
Firmware & phoning home (not scored)
- The same CVE-2025-65294 write-up reports the undocumented remote command-execution mechanism in G3 firmware from 3.4.4, removed in 4.1.8 and later. Keep firmware updated.7
Police & law-enforcement requests (Aqara)
Discretionary US privacy policy: discloses to law enforcement "if required or permitted to do so by law or legal process", and may disclose to prevent physical harm. No warrant requirement or user notice stated.6 Compare companies
Security incidents & settlements (Aqara)
| Date | Company | What happened | Type |
|---|---|---|---|
| Jun 2026 | Aqara | runZero published CVE-2026-50083 (NVD CVSS 9.8) and related flaws in Aqara's cloud login and API services, including hardcoded OAuth credentials that could be chained to take over accounts and devices. Aqara said the issues were fixed in April 2026.89 | Serious vulnerability |
| Dec 2025 | Aqara | CVE-2025-65294 (CVSS 9.8): researchers documented an undocumented remote command-execution mechanism in Aqara hubs and camera hubs. Their regression testing reports it removed from the Camera Hub G3 but still present in the G4 doorbell firmware they tested.107 | Serious vulnerability |
Similar cameras compared
| Device | Score | Offline | Local storage | Home Assistant | RTSP/ONVIF | Subscription | Account |
|---|---|---|---|---|---|---|---|
| Ubiquiti UniFi G5 FlexCamera · PoE | 90 | Yes | Yes | Local push | Yes | Not needed | Not required |
| Ubiquiti UniFi G5 BulletCamera · PoE | 90 | Yes | Yes | Local push | Yes | Not needed | Not required |
| Ubiquiti UniFi G4 InstantCamera · USB-C, Wi-Fi | 90 | Yes | Yes | Local push | Yes | Not needed | Not required |
| Aqara Camera Hub G3Camera · Plug-in (USB-C), Wi-Fi | 43 | Partial | Yes | Community only | Unverified | Not needed | Unverified |
More from this company: Is Aqara safe? Policies and incident record. Have a question about this device? Ask us or suggest a device.
Spotted an error? See our corrections policy. Informational only, not legal advice.
Sources
- Aqara: Camera Hub G3 product page · checked Oct 22, 2026
- Home Assistant: HomeKit Device integration · checked Oct 22, 2026
- Apple: Store encrypted camera footage with HomeKit Secure Video · checked Oct 22, 2026
- Apple Platform Security: HomeKit camera security · checked Oct 22, 2026
- Aqara Home app privacy policy (non-EU) · checked Oct 22, 2026
- Aqara US Privacy Policy · checked Oct 22, 2026
- Researcher write-up: Aqara undocumented remote execution (CVE-2025-65294) · checked Oct 22, 2026
- NVD: CVE-2026-50083 (Aqara cloud hardcoded OAuth credential) · checked Oct 22, 2026
- runZero advisory: Aqara hardcoded OAuth client credentials · checked Oct 22, 2026
- NVD: CVE-2025-65294 (Aqara hubs undocumented remote execution) · checked Oct 22, 2026