Local-only Wi-Fi baby monitor vs cloud: what leaves the house?

Where can the nursery picture actually sit?

This page is not a rematch of DECT audio versus a Wi-Fi camera. It splits Wi-Fi cameras into four places the pixels can live. A single box on a shop shelf can use more than one of them on the same night.

What leaves the house on each path?

On-device. A parent unit that talks only to its camera, or a card in the camera, keeps the recording in the room. The catch is metadata: some 'local' apps still phone home for account login, firmware checks or crash logs even when the video file never uploads.

LAN-only. The phone and camera share the same router. If you pull the WAN cable or switch the camera to a documented local-only / Wi-Fi-off mode, the live view should fail once you leave that network. NCSC's camera guidance is that if you do not need to watch via the internet, disable remote viewing — and notes that doing so can also stop movement alerts and smart-speaker links.

Vendor cloud. The app opens a session through the maker's servers so a phone on 4G can see the cot. That is the feature. It also means a contractor in another country can sit on the path. Which? (June 2021) reported that a third-party company in Bosnia and Herzegovina had administrative access to a server used for The Wonder Weeks paid HD Wi-Fi baby-monitor add-on, and that the same server appeared to host Minecraft. Which? said it had no firm evidence that real users' feeds were opened; the company said it addressed the findings.

Paid clip history. Live view can be ephemeral while 'moments', night summaries or cloud backup sit on disk for the plan length. Philips' Baby Monitor+ notice is a useful contrast: it says live streams are not stored by Philips, in-app videos stay on the phone, and the notification dashboard keeps alert history for up to 30 days. Read the paid-plan page for where *your* clips sit — local card, phone, or a named cloud region.

The ICO Children's Code standard on connected toys and devices asks providers to be clear who processes personal data when the connected part is outsourced. That is a duty on the company, not a test you can run from the nursery.

How do I tell which path a listing is selling?

1. 1
   Find the words 'remote view', 'from anywhere' or '4G' Those features need a path off your LAN — usually the vendor cloud. A parent unit with no app can still be local-only even if the camera has a Wi-Fi chip for setup.
2. 2
   Find 'local storage', 'micro-SD', 'no subscription required to record' That is on-device or LAN recording. Then read the asterisk: Eufy-style notes often say thumbnails for push alerts still go to the cloud if you turn that alert style on.
3. 3
   Find the paid plan name Insights, Plus, Cloud Backup, HD add-on. Open the privacy notice and search for 'store', 'third party' and 'retention'. Which?'s Wonder Weeks piece is the worked example of a paid monitor feature sitting on someone else's server.
4. 4
   Decide remote access before the first night NCSC: if you do not need to view the camera over the internet, switch that feature off. Also change any default password and turn on automatic updates while the PSTI support period lasts.

Is 'Wi-Fi monitor' enough information on a spec sheet?

No. Two cameras can both say Wi-Fi and still differ on whether last Tuesday's nap left the building. A LAN-only hybrid with Wi-Fi switched off in the app is closer to a parent-unit set for *where the video goes*. A cloud Insights camera is closer to a security camera with a nursery mount. Shop language collapses them; your router log does not.

PSTI still applies to a relevant connectable product from 29 April 2024: published update period, no shared default password, a security-reporting contact. That duty is about how long fixes arrive, not about whether pixels stay in the house.

Does keeping video in the house change safer sleep?

No. The Lullaby Trust's position is that a monitor is not a substitute for a parent or carer, and that you stay in the same room for the first six months. Local storage does not change SIDS advice. If your baby was born early or has a medical condition, ask the clinical team what monitoring, if any, they want you to use.

In shortIn short: ask four questions — on-device, LAN-only, vendor cloud, paid history — and read the privacy notice for third-party servers. Which? already showed that a popular paid add-on can sit next to unrelated software on a contractor's machine. Local is a routing choice, not a safety certificate.