Arlo says they need "valid legal process" to share your footage. That sounds like a warrant. It isn't. A subpoena works fine — no judge needs to approve it. Every clip your camera uploads to Arlo's cloud is one subpoena away from law enforcement. If you pay for 24/7 recording, congratulations: you're maintaining a police-accessible surveillance archive of your own property at your own expense.
critical
Hackers accessed Arlo cameras and started talking to people through their own security cameras. They panned cameras around, played audio, and watched live feeds. The attack vector was simple: try passwords from other breaches (credential stuffing). Arlo didn't require two-factor authentication, so a reused password gave a stranger full access to watch, listen, and speak through your home cameras. "Bank-level security" that any script kiddie with a password list could bypass.
high
You bought an Arlo camera system for $400 in 2018. In 2023, Arlo announced they're turning off the servers. Your cameras? They just stop working. Can't record. Can't stream. Can't alert. Five-year-old hardware turned into plastic paperweights because Arlo decided to end-of-life the cloud servers they depend on. The "security system" you installed had an expiration date nobody mentioned at checkout.
Arlo says it does not use your data without consent. But lawsuits allege Arlo's cameras scan your face without proper permission, and that a third-party company secretly records your conversations when you chat with Arlo's customer support.
high
Arlo promises it does not capture your data for advertising, but the Arlo app contains Google AdMob (an advertising toolkit) and requests permissions specifically designed for tracking you across apps to serve targeted ads.
high
Arlo pledges it does not sell your data or use it for advertising, but its own website tracks you with Facebook, Google Ads, and TikTok trackers, and its privacy notice admits sharing your browsing data with advertisers — which legally counts as selling data in multiple US states.