A babysitter needs a short, testable access window—not permanent control of the home. This 2026 HomeKit babysitter checklist covers arrival, smart-lock entry, alarm authority, camera privacy, child-safe alerts, emergency access, failures, departure proof, and same-night revocation.
The goal is not to automate childcare. It is to make the security controls predictable while the parent or guardian is away. The adult remains responsible for the access design, privacy rules, emergency contacts, and removal of temporary access.
HomeKit babysitter access at a glance
| Job | Minimum control | Proof before leaving |
|---|---|---|
| Front-door entry | Named, time-limited lock credential | Successful entry and expiry test |
| Alarm handling | Only the authority needed for the shift | One supervised arm and disarm test |
| Child safety | Clear door, smoke/CO, and emergency rules | Babysitter explains the response in their own words |
| Camera privacy | No cameras in private spaces; no hidden recording | Locations and allowed views reviewed together |
| Parent alerts | Only alerts the parent can act on | Test alert reaches the correct primary and backup |
| Departure | Lock, alarm, child handoff, credential removal | Same-night closeout record |
1. Write the shift before granting access
Record the sitter’s name, mobile number, arrival window, expected departure, approved doors, alarm authority, child pickup authority, emergency contacts, and closeout owner. Do not put PINs, lock codes, recovery codes, or private camera links in the shift sheet.
Separate three events that are often blurred together: the sitter arriving, the parent leaving, and the parent returning. Each event has a different lock, alarm, child-handoff, and notification state.
- Arrival window with a small delay allowance.
- Exact entry door and backup physical-entry method.
- Whether the sitter may arm, disarm, or only call the parent.
- Whether any visitors, deliveries, or pickups are expected.
- Who acts if the parent cannot be reached.
- When temporary access must stop working.
2. Use a named, temporary lock credential
Create a separate credential for the sitter. Follow the temporary smart-lock access checklist to set the door, allowed hours, start date, expiry, owner, and deletion step. Never give the sitter the family administrator code or reuse a former sitter’s credential.
Test the code from outside with the door fully closed. Then test it again after a short temporary expiry window. If the lock cannot schedule access, the parent owns manual activation and same-night deletion.
3. Separate lock entry from alarm authority
Opening the door and disarming the alarm are different permissions. Give the sitter only what the shift requires. If the sitter can disarm, use a named user or separate PIN where the system supports it. Do not share the household master code.
Run one supervised entry sequence: unlock, open, disarm, confirm safe arrival, and close the door. Repeat the departure sequence: check the children are handed back, close the door, arm the right mode, lock, and confirm the state.
The broader HomeKit house-sitter access checklist is useful for multi-day care. This page is narrower: a short childcare shift with a parent-owned start and closeout.
4. Keep Home access smaller than the shift
HomeKit invitations can expose more than a front-door job. Review Apple’s current Home sharing controls and the exact access options shown on the parent’s devices. If a lock credential is enough, do not add the sitter as a permanent home member.
If Home access is required, document which accessories the sitter can see or control. Avoid authority over bedrooms, private camera recordings, automations, account settings, new-member invitations, or unrelated homes. Remove the member after the shift and use the HomeKit member-removal checklist to prove access ended.
5. Set camera privacy rules before recording
Do not place cameras in bathrooms, bedrooms, changing areas, or another place where a child or sitter reasonably expects privacy. Disclose every active camera and doorbell before the shift. Explain what records, who can watch live, how long clips remain, whether audio is enabled, and what event would justify reviewing footage.
Use the security-camera privacy guide to review placement and household access. A camera should answer a defined security question—such as whether the exterior door opened—not supervise ordinary childcare minute by minute.
- Keep interior cameras out of private and care spaces.
- Disable unnecessary audio and broad shared-user access.
- Do not send clip links through a group chat.
- Keep only the evidence needed for a real incident.
6. Route only actionable alerts
A babysitter does not need every low-battery, motion, package, and automation alert. The parent does not need a notification flood that hides the one door or alarm event that matters. Assign alerts by job:
- Sitter: entry delay, alarm state when authorised, door-left-open warning, and life-safety warning where supported.
- Parent: sitter arrival, unexpected exterior entry, alarm event, lost connectivity, and missed closeout.
- Backup adult: only the events they are expected to act on if the parent is unavailable.
Use the security-app permission audit to check notifications, location, camera, microphone, background, and local-network access on every phone used during the shift.
7. Make emergency response independent of the app
Write emergency contacts where the sitter can reach them without unlocking a parent-owned phone. Include the property address, children’s names and medical instructions approved by the parent, primary and backup adults, emergency services, poison information if relevant, and the alarm-monitoring contact procedure.
For smoke, carbon monoxide, fire, or another immediate danger, safe evacuation and emergency services come before app troubleshooting. The sitter should know the physical exit, meeting point, mechanical door release, and which doors must never be blocked.
Run the siren audibility test from the rooms used during childcare. A phone notification is not a substitute for a warning that can be heard and acted on.
8. Prove lockout recovery without sharing administrator secrets
The sitter needs a safe fallback if the lock battery fails, the door sticks, or the code is rejected. Use the smart-lock lockout recovery checklist to define who has the mechanical key, where emergency power is applied, which locksmith may be called, and who authorises forced entry.
Do not hide a key in an obvious outdoor location or give the sitter the account recovery password. The backup route should open the correct door without granting permanent digital authority.
9. Test internet, phone, and power failures
A short childcare shift can still meet an internet outage, a dead parent phone, a dead sitter phone, a low lock battery, or an unavailable cloud service. Use the internet-outage test log to record what the lock, alarm, cameras, siren, local automations, and monitoring do without the normal connection.
The sitter should know which controls still work locally, which alerts may be delayed, and when to use the written backup contact. The parent should know whether a missed online notification means the home is safe or simply unreachable.
10. Assign a backup administrator for the shift
If the parent is driving, in a meeting, or outside coverage, a named backup adult must be able to interpret the alert and help. Run the backup-administrator drill before the first shift.
The backup needs the minimum access needed to respond. They do not automatically need private camera history, billing details, every lock, or permission to invite new members.
11. Record an incident without turning it into surveillance
If an unexpected entry, alarm, lockout, missing notification, or safety event occurs, use the incident timeline worksheet. Record timestamps, alerts, device states, people contacted, actions, and unresolved gaps. Preserve original evidence before editing or sharing copies.
Keep the timeline factual. Do not use a security incident as permission to inspect unrelated private footage or messages.
12. Close the shift and revoke access the same night
- Confirm the child handoff to the authorised adult.
- Check exterior doors, garage, alarm mode, and required lights.
- Confirm the sitter has left and the entry door is locked.
- Expire or delete the sitter’s lock credential.
- Remove temporary Home or app access.
- Review active sessions if the sitter used a household tablet.
- Record any incident, failed control, or follow-up owner.
- Retest that the removed credential and account no longer work.
Run a 60-minute HomeKit babysitter access test
- Minutes 0–10: review the written shift, cameras, privacy boundaries, emergency contacts, and meeting point.
- Minutes 10–20: test named lock entry, door closure, alarm disarm, and safe-arrival confirmation.
- Minutes 20–30: trigger one actionable door alert and one life-safety test using the device maker’s approved method.
- Minutes 30–40: disable Wi-Fi on a test device and confirm the written offline and backup-contact route.
- Minutes 40–50: simulate a lockout and a parent who cannot answer. The sitter follows the approved backup route.
- Minutes 50–60: complete departure, expire the credential, remove temporary access, and prove re-entry fails.
HomeKit babysitter access scorecard
| Control | Owner | Pass rule |
|---|---|---|
| Named entry | Parent | Credential works only for the sitter, door, and shift |
| Alarm authority | Parent | Sitter can perform only the approved alarm job |
| Privacy | Parent | All cameras are disclosed and private spaces are excluded |
| Alerts | Primary and backup | Each alert reaches a person who can act |
| Emergency response | Sitter | Address, contacts, exit, and meeting point are known without the app |
| Closeout | Parent | Temporary credentials, membership, and sessions are removed and retested |
Do not start the shift until these blockers are cleared
- The sitter has the master lock code or household administrator login.
- Camera locations, recording, or audio have not been disclosed.
- A camera covers a bedroom, bathroom, changing space, or private care area.
- The sitter cannot explain smoke/CO, fire, lockout, or unexpected-entry response.
- The only emergency contact is the parent who may be unreachable.
- The lock has no tested battery, key, or approved emergency-entry fallback.
- Internet loss makes the household mistake “offline” for “safe.”
- No one owns same-night access removal and proof.
Frequently asked questions
Should a babysitter become a permanent Home member?
Usually not for a short shift. Prefer a named, time-limited lock credential and only the alarm authority required. If Home access is necessary, limit it and remove it after the shift.
Should the babysitter receive the family alarm PIN?
No. Use a named user or separate PIN where supported. The household master PIN should remain private.
Can parents use indoor cameras during babysitting?
Camera use must follow local law and clear privacy rules. Disclose every camera, keep cameras out of private areas, limit access and retention, and use them for a defined security job rather than hidden supervision.
What happens when the babysitter leaves?
Confirm child handoff, lock and arm the home, expire the lock credential, remove temporary Home or app access, review sessions, and test that removed access no longer works.
