Can I trust Finest with my home?
No app can prove it isn’t malicious. That’s true of ours and of any other app you install from an app store. So instead of asking you to take our word for it, we do our best to limit what Finest can see and make what it does visible.
Your Home Assistant data never leaves your home. Our servers check your subscription and deliver notifications. Every action Finest takes shows up in Home Assistant’s logbook under your name, and you can revoke Finest’s access at any time.
Services the app uses
| Service | Why |
|---|---|
| Your Home Assistant | Everything you see and control in the app |
| Finest servers | Checking your subscription, confirming passkey sign-in (your phone shows it as ui.nestfi.rs), passing end-to-end encrypted notifications on to Apple and Google, and status reports, for professional installations |
| Apple Push Notification service and Firebase Cloud Messaging | Delivering notifications to iPhone and Android |
| OpenStreetMap | Map tiles |
What our servers never receive
- Your Home Assistant’s data: device states, history or events. Finest Home is only a front end for your own Home Assistant
- Your Home Assistant login or tokens
- Usage analytics, advertising or tracking data
Status reports come only from professional installations
A home you set up yourself sends Finest no status reports at all. Professional installations send them under their service contract, so we can look after the system. This is what they contain.
- Basic status
- Integration and Home Assistant versions, uptime, and whether backups are on.
- Diagnostics
- Adds disk usage, how many entities are unavailable, the home Wi-Fi names used for local access, the LAN DNS check and certificate expiry.
What you can check
- Every action through Finest appears in Home Assistant’s logbook under the person who did it.
- Revoke Finest’s access in your Home Assistant profile, under refresh tokens.
- Remote access is your own. We are not in the path between your phone and your home.
- Notifications are end-to-end encrypted: sealed on your Home Assistant and opened only on your phone, so our servers can’t read them.
- The Finest integration is open source under Apache-2.0, the same license as Home Assistant.
- An independent security audit.Planned