August 2026 guide. A HomeKit camera can expose more than a live picture. Depending on the camera, home settings, Apple account, vendor account, and service state, a person may be able to watch live video, hear audio, view recordings, receive notifications, change recording rules, export clips, or remove the accessory. A household invitation should not be treated as a single yes-or-no camera permission.
This audit maps access by person, device, app, and camera function. It is designed for partners, roommates, adult children, caregivers, house sitters, installers, and anyone closing access after a move or relationship change. It does not promise that every camera or vendor app exposes the same controls. Check the exact current settings on every system that can reach the camera.
Apple references checked for this guide: invite others to control accessories in Apple Home and set up HomeKit Secure Video in iCloud. Menu names and available controls can differ by software version, account role, camera, home hub, region, and vendor service.
HomeKit camera household access at a glance
| Access surface | Question to answer | Proof to keep |
|---|---|---|
| Apple Home resident | Can this person control accessories remotely, add or edit accessories, or change camera behavior? | Resident settings screenshot plus a live function test |
| Live camera view | Which people and devices can open video and audio now? | Named viewer list and a successful plus failed access test |
| Recordings | Who can open recorded events, activity history, and related notifications? | Recording-state map and playback test |
| Evidence export | Who can save or share clips outside the home? | Export owner, destination rule, and sample file |
| Vendor app | Does a separate maker account retain live view, storage, audio, settings, or ownership? | Vendor user and session inventory |
| Trusted devices | Which phones, tablets, watches, computers, displays, and browsers can reach the home? | Device inventory and signed-out test |
| Removal | Does removing a resident also close vendor, device, export, and recovery access? | Revocation test from a previously authorized device |
Start with people, not camera icons
Create a list of every person who may have camera access. Include the home owner, residents, temporary guests, adult children, caregivers, cleaners, property managers, installers, former residents, and anyone with a shared vendor login. Add the Apple Account used, vendor account used, phone or computer used, date access was approved, reason for access, and planned end date.
Do not use a shared household identity when named access is available. Shared credentials make it hard to know who watched, changed, exported, or removed something. They also make removal unsafe because changing one password can affect everyone at once.
| Person | Needed function | Not needed | End condition |
|---|---|---|---|
| Home owner | Administration, recovery, live view, recording settings, evidence ownership | Routine access from unused devices | Ownership transfer or home closure |
| Adult resident | Live view, intended notifications, household control | Vendor ownership or unrelated property cameras | Move-out or role change |
| House sitter | Time-bounded entry awareness and response instructions | Old recordings, camera administration, permanent remote access | Return date |
| Caregiver | Consent-based view or alert for a defined care task | Private rooms, unrelated audio, indefinite clip access | Shift, care-plan, or consent change |
| Installer | Temporary setup and test access if required | Ongoing live view, recordings, exports, household control | Acceptance test completion |
Separate six camera permissions
A resident may appear to have camera access while one function is unavailable, or may retain a sensitive function through another app. Test these six permissions separately.
- Live video: can the person open the current view from home Wi-Fi and mobile data?
- Audio: can the person hear the microphone, speak through the camera, or change audio behavior?
- Recordings: can the person find, play, scrub, or delete stored events?
- Notifications: which camera events, people, packages, vehicles, animals, or offline states reach the person?
- Settings: can the person change streaming, recording, zones, classifications, privacy, audio, status lights, automation, or service settings?
- Export: can the person save or share a clip outside Apple Home or the vendor service?
Use the HomeKit camera recording-options audit to document separate When Home and When Away behavior before testing other people. Access results are meaningless when the owner does not know whether a camera should stream, record, detect, or stay off in each state.
Map Apple Home and the vendor app separately
Apple Home may provide camera viewing, recordings, notifications, household roles, and automations. The camera maker’s app may still control firmware, battery, local storage, cloud storage, detection, zones, privacy mode, audio, ownership, shared users, or account recovery. A person removed from Apple Home may still have a vendor account. A vendor password change may not remove an Apple Home resident.
| Function | Apple Home result | Vendor result | Owner action |
|---|---|---|---|
| Owner identity | Name the Apple home owner | Name the camera account owner | Document both recovery paths |
| Shared people | List every resident | List every shared user, family member, or household | Remove stale access in both |
| Sessions | List Apple devices that can open the home | List phones, browsers, displays, and integrations where shown | Revoke unknown or unused sessions |
| Recording | Record Home and Away stream or recording state | Record local or cloud storage and playback state | Resolve conflicting rules |
| Export | Test clip saving by the intended evidence owner | Test download or share path where present | Set one evidence rule |
| Deletion | Record who can remove a camera or home | Record reset, unlink, subscription, and ownership controls | Keep a rollback and handoff plan |
Test one least-access role at a time
Do not invite several people and assume their results match. Add one test person, record the settings presented to the owner, then test the exact functions from the invited person’s device. Start with the minimum role that should do the job. Add control only when a required test fails for a legitimate reason.
Use a harmless camera view and a scheduled test window. Do not expose private recordings to prove access. Create a short test event with informed household members, then check live view, audio, notification, recording playback, settings, and export. Remove the test person and confirm each function fails afterward.
If an invitation does not arrive, arrives at the wrong account, or leaves partial access, use the HomeKit invitation-failure checklist. Do not solve an invitation problem by sharing the owner’s Apple or vendor password.
Protect live video and audio as separate data
A camera view can reveal faces, schedules, possessions, security devices, screens, keys, medications, and whether a person is home. Audio can capture conversations outside the intended security event. Decide whether audio is needed at all, where cameras may point, and when indoor cameras should be off or limited.
Apply the HomeKit camera privacy-zone guide to the physical view before assigning viewers. A privacy zone or detection mask does not correct a camera that is aimed into a bedroom, bathroom, neighbouring window, or shared private area. Move the camera when the field of view is wrong.
Record who may hear audio, who may speak through the camera, whether a status light or physical shutter exists, and how residents know when recording is active. Check applicable law and household consent before recording audio or shared areas.
Treat recordings as evidence with an owner
Choose one person or role responsible for preserving an event. That person should know how to find the correct clip, keep the timestamp and camera name, export without editing the only copy, record the incident context, and share only with an appropriate recipient.
Run the HomeKit camera evidence-export checklist before an incident. A live view or notification screenshot is not the same as a saved original clip. Test the actual export, open it on another device, and document where routine test clips should be deleted.
Review Apple Home activity history as a separate record. Activity history, notifications, camera recordings, vendor events, and alarm events may use different clocks, retention, viewers, and deletion rules. Do not assume one timeline contains everything.
Audit every device that can display a camera
A person’s account can remain safe while an old phone, tablet, computer, browser, television, or smart display stays signed in. List every device used for Apple Home, the vendor app, clip exports, and account recovery. Include devices stored in drawers, used by children, shared at work, left with a former resident, or connected to a display in a common area.
Use the trusted-device and session audit to identify old access. Then run the HomeKit signed-out-phone test so the household knows what a removed or signed-out device can still show through notifications, downloaded clips, screenshots, widgets, caches, or another vendor session.
Prepare for urgent access removal
Some removals are planned. Others follow a lost phone, stolen device, account compromise, move-out, separation, safety concern, or staff change. Write the urgent sequence before it is needed.
- Move to a safe place and contact the appropriate responder when there is an immediate threat.
- Preserve lawful incident evidence before changing or deleting settings.
- Remove the Apple Home resident or close the affected Apple Account device access as appropriate.
- Remove vendor shared users and revoke vendor sessions.
- Change exposed passwords, recovery methods, passcodes, and shared credentials.
- Review locks, alarm codes, monitoring contacts, physical keys, and network access separately.
- Check camera live view, recordings, notifications, settings, and export from a known-safe owner device.
- Test the previously authorized device and record which functions now fail.
Use the Apple Safety Check and HomeKit security audit when personal safety is part of the event. Safety Check should start, not replace, the separate review of Apple Home residents, camera permissions, vendor accounts, alarm users, locks, codes, keys, hubs, and automations.
Use a planned removal checklist
For an ordinary move or role change, follow the HomeKit member-removal checklist. Set an end time, export allowed records, transfer the evidence role, remove personal automations, revoke Apple and vendor access, remove old devices, rotate shared credentials, and run a failed-access proof from the former member’s device.
Renters should also use the HomeKit renter move-out checklist to separate resident access from physical property restoration. Remove mounts, reset renter-owned cameras, restore approved hardware, photograph the final condition, and confirm the former resident cannot see the property after departure.
Build a camera-access review schedule
| Trigger | Required review | Owner |
|---|---|---|
| New resident or caregiver | Consent, minimum role, device test, camera boundaries, end date | Home owner |
| New camera or vendor service | Owner identity, vendor users, recording, export, audio, privacy, plan-ended state | Camera administrator |
| Phone replacement | Old-device sign-out, new-device control, notifications, recordings, vendor sessions | Device owner |
| Move-out or role end | Apple resident, vendor access, devices, exports, codes, keys, billing | Home owner plus departing person where safe |
| Incident or account warning | Evidence, residents, sessions, passwords, recovery, locks, alarm, network, monitoring | Named incident owner |
| Quarterly review | People, devices, live view, recordings, audio, exports, automations, service state | Backup administrator |
Run a 60-minute HomeKit camera access audit
- Minutes 0–8: list every camera, Apple home owner, resident, vendor owner, vendor user, service, home hub, and trusted device.
- Minutes 8–16: record intended live view, audio, recording, notification, settings, and export rights for one test resident.
- Minutes 16–26: from that resident’s phone, test live video, mobile-data access, audio, a harmless event notification, recording playback, and settings.
- Minutes 26–34: test clip export and open the file on another authorized device. Record the timestamp, camera name, destination, and deletion rule.
- Minutes 34–42: compare Apple Home with the vendor app. Check owner, users, sessions, storage, audio, zones, privacy, firmware, and recovery.
- Minutes 42–48: remove the test resident and vendor access. Revoke the test device or session where planned.
- Minutes 48–54: retry live view, recordings, notifications, settings, export, Apple Home, and vendor access from the formerly authorized device. Every denied result should match the plan.
- Minutes 54–60: restore intended access, delete routine test clips, save the access sheet, and assign the next review and urgent-removal owner.
Do not close the camera-access audit until these blockers are cleared
- The Apple home owner or vendor camera owner is unknown.
- A shared password is the only way a household member can access the camera.
- The household cannot state who may watch live video, hear audio, view recordings, change settings, or export clips.
- Apple Home and the vendor app show different people or sessions with no owner assigned to resolve them.
- An old resident, installer, caregiver, guest, browser, phone, tablet, display, or integration still has access.
- A camera view or audio path covers a private area without a lawful and disclosed purpose.
- No authorized person has proved recording playback and evidence export.
- Removing a resident has not been tested from the formerly authorized device.
- Urgent removal depends on one unavailable person or one unrecovered account.
- The household has no separate plan for locks, alarm codes, monitoring contacts, physical keys, or network access.
Frequently asked questions
Does every Apple Home resident get the same camera access?
Do not assume so. Available controls can depend on owner settings, resident permissions, camera behavior, software, home hub, account state, and vendor service. Test live view, audio, recordings, notifications, settings, and export separately for each role that matters.
Does removing someone from Apple Home remove vendor-camera access?
Not necessarily. Review the camera maker’s shared users, sessions, household, ownership, and recovery settings separately. Then test the formerly authorized device in both systems.
Who should be allowed to export camera clips?
Use the smallest practical group. Choose a named evidence owner who can preserve the original clip, timestamp, camera name, and incident note, and who knows when and where sharing is appropriate.
Should a house sitter get permanent camera access?
No by default. Give only the time-bounded functions needed for the agreed task, disclose the camera rules, set an end time, and prove access fails after removal.
What should I test after removing a resident?
From the formerly authorized device, retry Apple Home, the vendor app, live video, audio, recordings, notifications, settings, export, saved sessions, and downloaded files. Review locks, alarm codes, physical keys, network access, and monitoring contacts separately.
