The Short Answer
If you want a video doorbell that keeps your footage on your own hardware and out of cloud accounts, buy a camera that supports RTSP or ONVIF and pair it with a self-hosted NVR like Frigate, or pick a manufacturer that documents a real local-only mode. Reolink's PoE and WiFi doorbells both record to a microSD card up to 256 GB without a subscription. [6] [7]
If you want a consumer-friendly app and you accept cloud storage, the cleanest option among the major brands is Ring, because Ring has shipped an opt-in end-to-end encryption mode since 2021 and is rolling out TAKE encryption, under which Ring says it deletes its copy of the keys after powering the features you use. [1] [3] Google does not document an end-to-end encryption option for Nest doorbell video. [4]
Eufy advertises local storage and admitted in 2022 that choosing thumbnail push notifications sent preview images to a cloud server, which it had not made clear to users. [5] Wyze had a security incident in February 2024 that let about 13,000 users see thumbnails from other people's cameras; 1,504 tapped on them, and in some cases an event video could be viewed. [8]
This page walks through what each platform actually does with your footage, what a police request looks like at each company, and what you can do to make any of them more private.
What a Video Doorbell Actually Has to Lose
A doorbell camera sees your front porch. It records everyone who walks up to your house, including kids, delivery workers, friends, and anyone you would rather not have on a corporate server.
The footage lands somewhere. For Ring, Nest, Eufy, and Wyze, the default somewhere is the vendor's cloud. The footage is then searchable by the vendor, can be subpoenaed by police with the right paperwork, and on Ring can be requested by local agencies through a built-in feature: request notifications are on unless you turn them off, and footage is shared only if you choose to share it.
Two questions determine how exposed you are.
- What encryption protects the video at rest, and who holds the keys?
- What is the company's policy on police requests, and what paperwork do they require?
The rest of this page answers both questions for each of the major doorbells, then compares them against doorbells that record locally without ever touching a corporate cloud.
Ring (Amazon): Best Encryption, Built-in Police Request Feature
Ring's consumer brand reputation is bad because of its long partnership with police departments and the Ring Neighbors network. Ring's encryption posture is actually ahead of the field for a major cloud doorbell.
Ring shipped an opt-in legacy end-to-end encryption mode for video. Ring's own statement on launch: "with video E2EE, only your enrolled mobile device has the special key needed to unlock these videos, designed so no one else can view your videos -- not even Ring or Amazon." [11] With legacy E2EE enabled, Ring cannot decrypt the video, even when served with a warrant. [3] [11] EFF's February 2021 writeup of the launch notes that "Ring should take the step to make this feature the default, but for the time being, you will still have to turn encryption on." [11]
Ring documents which of its devices are not compatible with E2EE. According to Ring's own support page, the following devices do not support legacy video end-to-end encryption:
- Video Doorbell (1st Gen)
- Video Doorbell Wired
- Stick Up Cam (1st Gen)
- Spotlight Cam (1st Gen)
- Spotlight Cam 2K
- Floodlight Cam 2K [2]
Ring is now rolling out a new default called TAKE, which stands for Throw Away the Key Encryption. Amazon's description: TAKE is designed to be "a new standard for default video encryption and customer control in home security," and "only you retain the keys to your video." [1] With TAKE, "your Ring videos are protected with unique, rotating encryption keys," and "a copy of the keys is temporarily held inside a secure enclave within the cloud; think of it as a sealed vault that can only provide Ring access to the key under strict, limited conditions." [1] Amazon says TAKE "will be the default encryption for all Ring customers worldwide once fully rolled out," and "E2EE will remain an optional setting." [1]
Ring's police-facing features are the part most readers will care about. Ring's support page describes a feature called Community Requests. Per Ring: "Public safety agencies can publish Community Requests in the Neighbors feed asking community members within a specific area to share Ring video footage." [9] "Ring users within the designated area receive a notification and an email." [9] Only agencies that are also "Axon Evidence users" with Neighbors Verified accounts can publish a Community Request. [9]
The data flow with E2EE on, when police come asking, is different. Consumer Reports: "Law enforcement also won't be able to access your footage from Ring, even with a legal order, though it could acquire it by serving you with a legal order instead." [3] The legal order targets you, not Ring, because Ring no longer holds the keys.
Two other Ring privacy details worth knowing:
- Ring cameras may enroll you in Amazon Sidewalk unless you opt out. Consumer Reports: "You might even be automatically signed up for Amazon Sidewalk with your Ring camera." [3]
- Consumer Reports: "Ring states that local police can't view live video feeds or control Ring devices." [3]
Ring planned a deeper integration with Flock Safety, the ALPR company that runs a national camera network used by police. Ring's statement on the cancellation: "Following a comprehensive review, we determined the planned Flock Safety integration would require significantly more time and resources than anticipated. We therefore made the joint decision to cancel the integration and continue with our current partners ... The integration never launched, so no Ring customer videos were ever sent to Flock Safety." [13]
Google Nest: Good Hardware, No Documented End-to-End Encryption
Google's Nest doorbells are well reviewed and integrate cleanly with Google Home. They are not private against Google or against police by default.
Google does not document an end-to-end encryption option for Nest camera or doorbell video. Its Nest privacy statement says only that personal information from Nest devices "is encrypted while it is being transmitted to Nest," which protects data in transit, not from Google itself. [4] In the February 2026 Nancy Guthrie case, FBI Director Kash Patel said the bureau collected video from her Nest camera out of "backend systems," although the sheriff had said she did not have a subscription that would have saved video. [14]
In practice, Google can reach stored video. Legal process served on Google can produce footage without a separate order to you. There is no opt-in mode that puts the keys in your hands the way Ring's legacy E2EE does.
Google's on-device detection is real, but it does not change who holds the encryption keys for stored video.
Eufy (Anker): Local Storage by Default, Cloud Controversy in 2022
Eufy's marketing leans hard on local storage. The doorbells can record to a HomeBase with a built-in hard drive and offer microSD card slots on some models. The appeal is real: if the recording never leaves your home, no subpoena to Eufy can produce it.
The reality did not match the marketing. On November 21, 2022, security consultant Paul Moore asked Eufy publicly why his "local storage" doorbell was storing faces on its servers without encryption, and why he could stream his camera without authentication. Eufy's own statement: "it was not made clear that choosing thumbnail-based notifications would require preview images to be briefly hosted in the cloud. That lack of communication was an oversight on our part and we sincerely apologize for our error." [5] Eufy's technical explanation: "To provide users with push notifications to their mobile devices, some of our security solutions create small preview images (thumbnails) of videos that are briefly and securely hosted on an AWS-based cloud server. These thumbnails utilize server-side encryption and are set to automatically delete." [5]
Eufy's HomeKit Secure Video support does add end-to-end encryption when the camera is used through Apple's HomeKit. Apple's privacy features page describes how HomeKit Secure Video handles recordings: "Recordings from security cameras that use HomeKit Secure Video are analyzed privately on your Apple devices at home and then sent securely to iCloud through end-to-end encryption," and "HomeKit Secure Video ensures that activity detected by your security cameras is analyzed and encrypted by your Apple devices at home before being securely stored in iCloud." [10]
Eufy is a reasonable pick if you commit to using it through HomeKit Secure Video and you trust Anker's fixes from late 2022. Outside of HomeKit, treat the local-storage claim with caution.
Wyze: Cheap Cameras, Repeated Cloud Breaches
Wyze is the budget option among the major consumer doorbells. The cameras are inexpensive and the cloud plans are cheap. The privacy track record is bad.
Wyze's own forum post on the February 16, 2024 security incident: "about 13,000 Wyze users received thumbnails from cameras that were not their own and 1,504 users tapped on them." [8] Wyze traced the cause to "a third-party caching client library that was recently integrated into our system," which under load "mixed up device ID and user ID mapping and connected some data to incorrect accounts." Most taps only enlarged the thumbnail, but "in some cases an Event Video was able to be viewed." [8]
Users in the same forum thread said thumbnails had also gone to the wrong accounts in September 2023. Wyze's statement on the February 2024 incident says "we have added a new layer of verification before users are connected to Event Videos." [8]
No end-to-end encryption option for Wyze doorbell video was found in the sources reviewed for this page. Wyze is the doorbell to skip if your threat model includes keeping your footage out of other people's view.
The Local-Only Alternative: RTSP, ONVIF, and Self-Hosted NVRs
If you want a doorbell that cannot be subpoenaed by anyone but you, the answer is to never let the footage leave your network. There are two ways to do this.
Buy a doorbell that supports RTSP or ONVIF and add storage yourself
RTSP is the Real Time Streaming Protocol; ONVIF is an industry standard that lets cameras and NVRs from different vendors talk to each other. A doorbell that supports these standards can stream to a network video recorder on your own network and ignore any cloud the vendor offers.
Reolink's PoE Video Doorbell product page documents local storage options: "microSD card slot (Max. 256GB), works with Reolink NVR," and "store your recordings locally on a Reolink Home Hub Pro with pre-installed 2TB HDD, Reolink NVR (with a built-in hard drive), FTP/NAS server, or microSD card." [6] It also lists supported protocols: "HTTPS, IPv4, UPNP, RTSP, RTMP, ONVIF, SMTP, NTP, DHCP, DNS, DDNS, FTP, P2P." [6]
Reolink's WiFi Video Doorbell product page documents the same: "microSD card slot (Max. 256GB)" and "No Monthly Fees For Local Storage." [7] The same protocols apply.
Run the NVR yourself with open-source software
Frigate is an open-source NVR built for real-time AI object detection. Frigate's homepage states: "All processing is performed locally on your own hardware, and your camera feeds never leave your home," and "there is no need to pay for your personal camera footage to be sent to the cloud for analysis." [12] Frigate pairs with any RTSP or ONVIF camera, including the Reolink doorbells above.
Blue Iris is a long-running Windows-based NVR with similar capabilities. The trade-off is the same: you provide the hardware, the cameras stream over your network, and the recordings never leave your home.
The catch with self-hosted is operational. You install the software, you maintain the hard drive, you deal with network configuration. There is no app push button. For readers willing to spend a weekend, the privacy win is real.
What About Police?
Every company on this page responds to legal process. The differences are in the paperwork and the defaults.
Warrant
A search warrant requires a judge to find probable cause. A valid warrant served on a vendor can reach any footage the vendor is able to decrypt; end-to-end encrypted footage is the exception.
Subpoena
A subpoena is a request from a prosecutor or grand jury, usually with less judicial oversight than a warrant. Ring's legacy E2EE changes the picture: with E2EE enabled, Consumer Reports says law enforcement cannot get the footage from Ring even with a legal order, and would have to serve the order on you instead. [3]
Community Request (Ring only)
Ring's Community Request feature does not require a warrant, and responding is voluntary. "Public safety agencies can publish Community Requests in the Neighbors feed asking community members within a specific area to share Ring video footage." [9] You see the request, you decide whether to share. The agency does not see your footage unless you tap share.
Emergency disclosure
Federal law (18 U.S.C. § 2702) lets a provider disclose communications and records to a government entity without a warrant if it believes in good faith that "an emergency involving danger of death or serious physical injury to any person requires disclosure without delay." [15]
The Comparison at a Glance
Ring (Amazon)
- Default cloud storage with subscription [3]
- Opt-in legacy end-to-end encryption since 2021 [3]
- TAKE encryption rolling out; Ring says it deletes its copy of the keys after powering the features you use [1]
- Some legacy models do not support E2EE [2]
- Community Requests push police requests to your Neighbors feed [9]
- Auto-enrolls in Amazon Sidewalk unless you opt out [3]
Google Nest
- Default cloud storage with subscription [4]
- No documented end-to-end encryption option for doorbell video [4]
- Google can reach stored video; legal process served on Google can produce footage [14]
- On-device AI detection does not change who can reach stored video
Eufy (Anker)
- Local storage on HomeBase or microSD on some models
- Admitted in 2022 that thumbnail notifications sent preview images to an AWS cloud server without making that clear [5]
- HomeKit Secure Video adds end-to-end encryption when used through Apple Home [10]
Wyze
- Default cloud storage with subscription
- No documented end-to-end encryption option for doorbell video
- February 2024 incident: about 13,000 users saw thumbnails from other people's cameras; 1,504 tapped on them, in some cases opening event video [8]
Reolink PoE or WiFi Doorbell
- microSD card up to 256 GB local storage [6] [7]
- RTSP, ONVIF, RTMP, and other protocols for NVR streaming [6]
- No subscription required for local storage [6] [7]
- Works with self-hosted NVRs like Frigate [12]
Which Doorbell Should You Actually Buy
If you want the simplest setup and you accept cloud storage, pick Ring, turn on legacy E2EE or wait for TAKE to reach your device, and turn off Community Requests in the Neighbors settings. [1] [3] This is the path with the strongest encryption defaults and the most clearly documented law enforcement process.
If you want Google Home integration and you trust Google with your footage, Nest is fine. Do not buy it for privacy. [4]
If you want a balance of local storage and consumer polish, Eufy works, but only if you use it through HomeKit Secure Video and only if you trust that Anker's 2022 fixes are real. [5] [10]
Skip Wyze for any doorbell at the front of your house until it documents end-to-end encryption.
If you want the footage to stay on your hardware, buy a Reolink PoE or WiFi doorbell with a microSD card, or any ONVIF-compatible IP doorbell, and pair it with Frigate on a small computer on your network. [6] [7] [12] This is the only setup on this page where no company can hand your footage to anyone but you.
What You Can Do About Any Doorbell You Already Own
Ring
- Turn on legacy E2EE under Control Center in the Ring app. It is opt-in. [3]
- Wait for TAKE to reach your device, or accept the default TAKE rollout once it lands. [1]
- Turn off Community Requests in the Neighbors settings, and opt out of Community Request emails under Control Center, Public Safety, if you do not want to see police posts. [3] [9]
- Opt out of Amazon Sidewalk in the Ring app settings. [3]
- Set up two-factor authentication on your Ring account.
Google Nest
- Turn on two-factor authentication on your Google account.
- Review which Google Home members have access to your doorbell and remove anyone who no longer needs it.
- Reduce notification history retention in the Google Home settings if available.
- Assume Google, and law enforcement through Google, can reach stored footage without further action from you. [14]
Eufy
- If you have a HomePod or Apple TV, set up the doorbell through HomeKit Secure Video for end-to-end encryption. [10]
- If you stick with the Eufy app, check the storage settings and confirm local-only mode actually disables cloud uploads. [5]
- Keep firmware updated.
Wyze
- Turn on two-factor authentication.
- Disable cloud recording if you do not need it, and rely on a microSD card on the camera.
- Replace the doorbell with a different vendor if you can.
The Bottom Line
The privacy of your doorbell footage is determined by where the keys live and whether the vendor has a push button for police. Ring has built the strongest encryption defaults among the major cloud doorbells, and TAKE is rolling out now. Google Nest documents no end-to-end encryption option. Eufy is solid only through HomeKit Secure Video. Wyze had a cross-account exposure incident in February 2024 and documents no end-to-end encryption.
If you want the doorbell with the least exposure to Amazon, Google, and police, the cleanest answer is a Reolink doorbell with a microSD card, or any ONVIF camera paired with a self-hosted NVR like Frigate.
Three things to remember.
- End-to-end encryption is opt-in on Ring. If you have not turned it on, Ring holds the keys and can be compelled. [3]
- Community Request notifications are on unless you turn them off; sharing footage is always your choice. If you do not want to see police posts in Neighbors, turn the feature off. [3] [9]
- Local-only doorbells still need an NVR. The microSD card slot alone is not a substitute for a real recorder with redundancy.
References
- About Amazon: Ring TAKE: How Throw Away the Key Encryption protects your videos
- Ring Support: Using legacy video end-to-end encryption (E2EE)
- Consumer Reports: Ring privacy and security settings to check
- Google Nest: Privacy statement for Nest products and services
- Security Systems News: Eufy responds to allegations of insecure cameras, violation of privacy laws
- Reolink: Reolink Video Doorbell (PoE) product page
- Reolink: Reolink Video Doorbell (WiFi) product page
- Wyze Forum: Update on Investigation of 2/16/24 Security Issue
- Ring Support: Community Request overview
- Apple: Privacy features, HomeKit Secure Video section
- EFF: Amazon Ring's End-to-End Encryption: What it Means (February 2021)
- Frigate: Open source NVR for real-time AI object detection
- Police1: Ring cancels planned Flock Safety integration (February 13, 2026)
- NBC News: Investigators wrangled video from Nancy Guthrie's Google Nest camera out of 'backend systems' (February 10, 2026)
- 18 U.S.C. § 2702: Voluntary disclosure of customer communications or records (Cornell LII)