Security cameras: local storage vs cloud, and what it means for your privacy

Three places your footage can live

Every home security camera has to put its recordings somewhere, and there are really only three options. Cloud cameras upload clips to the manufacturer's servers, where a subscription decides how long they stay. Local cameras write to a microSD card, a hub or a network video recorder (NVR) in your house. Hybrid systems record locally but still lean on the cloud for notifications, previews, remote viewing or an optional backup.

Most mainstream products are hybrids to some degree, which is why the marketing can be confusing. The useful questions are simple: where is the full-quality recording stored, what has to leave the house for the app to work, and what happens when the internet or the company's servers go down?

What the cloud is genuinely good at

The strongest argument for cloud storage is that the evidence leaves the building. Reolink, a company that mainly sells local-storage cameras, says as much in its own support article: its cloud service is optional, but it is the option that still has your clip if the camera is stolen or the memory card fails. A burglar who rips a camera off the wall or takes the recorder takes local footage with it.

The cloud also brings polish. Remote viewing tends to just work, alerts arrive with rich previews, and newer AI features such as searching your history or getting text descriptions of events usually run on the provider's servers. Ring's Canadian plans page, for example, places video search and descriptions in its top Ring Pro tier, and Google's support documentation puts AI descriptions and history search in the Advanced tier of Google Home Premium. Our guide to video doorbell subscriptions covers those plans and their Canadian pricing in more detail.

The cost is recurring, and it scales with time and cameras. It also creates a dependency: if the subscription lapses, Ring's plan comparison page says you cannot review recorded video, and if the provider changes its plans, you live with the result.

What local storage gets right

Local storage removes the monthly fee and keeps working when the internet is down. Reolink's support article says its cameras can record to a microSD card or upload to your own FTP server without any subscription. eufy's security page quotes on-device storage and expandable storage on its HomeBase S380 hub. A dedicated NVR or home server can keep weeks of continuous footage from several cameras, which few consumer cloud plans offer at a reasonable price.

It also means fewer copies of your life on someone else's computer. That matters more for indoor cameras than for one pointed at the driveway. A camera in a living room or a nursery records the most private parts of a household, and local storage limits who could ever access that footage, whether through a breach, a rogue employee or a legal request to the provider.

The trade-offs are real. You are responsible for the hardware, for replacing worn-out cards and drives, for keeping firmware current and for deciding how remote access works. Hide the recorder somewhere a thief will not find it quickly, and consider a small battery backup so it survives a cut power line.

Privacy lessons from the big brands

Two well-documented episodes show why storage location is a privacy question and not just a cost one. In 2023, NBC News reported that Ring agreed to pay US$5.8 million to settle Federal Trade Commission allegations that employees and contractors had overly broad access to customers' private videos. Ring disputed the claims and had tightened access in 2019, but the case showed how much depends on a provider's internal controls once footage is in the cloud.

Local-first brands are not automatically safe either. Reporting led by The Verge, and summarized by GIGAZINE in February 2023, found that eufy's web portal could produce streams that were not end-to-end encrypted, and that notification thumbnails reached the cloud even for owners who thought everything stayed at home. Anker said it had since encrypted the portal and launched a bug bounty, and eufy's current page notes in its footnotes that thumbnails for notifications are temporarily stored in the cloud.

End-to-end encryption is the feature that changes the picture most. Apple's iCloud guide says HomeKit Secure Video footage is end-to-end encrypted, analyzed on a home hub such as an Apple TV or HomePod before upload, and does not count against your iCloud storage. It needs an iCloud+ plan, the number of cameras depends on the tier, and you can review the last 10 days of activity in the Home app. It is a reasonable middle ground for Apple households with compatible cameras.

Going fully local: what the community recommends

For people who want nothing to leave the house, enthusiast communities keep landing on the same pattern: wired PoE cameras that offer standard RTSP or ONVIF streams, recording to an NVR or a home server, on a network segment with no internet access. A thread on the Lawrence Systems forum, run by the YouTube channel of the same name, about local doorbells shows how this plays out, with replies describing Reolink and Lorex hardware feeding Blue Iris, Synology or UniFi recorders, and recommending a separate camera network. The same replies were frank that phone notifications and two-way talk are where self-hosted setups most often get awkward.

Frigate is the open-source recorder that comes up most for Home Assistant users. Its documentation describes it as a local NVR with real-time object detection, built to work with Home Assistant, and strongly recommends a dedicated detector rather than relying on the CPU. A discussion on the Privacy Guides forum about recommending Frigate is a useful reality check: supporters praised local processing and the lack of a required subscription, while others pointed out that it needs comfort with Docker and networking, that hardware for several cameras and a detector can easily run to hundreds of dollars, and that it may be overkill if all you want is one doorbell.

If you are curious about that route, our research review of Home Assistant Green (Home Assistant Green review) explains what an entry-level hub can handle; heavy video analysis generally calls for more capable hardware.

A Canadian note on pointing cameras

Wherever the footage lives, think about what the camera sees. The Office of the Privacy Commissioner of Canada's video surveillance guidelines were written for businesses, not homeowners, but their principles translate well to a house: consider less invasive options first, limit the viewing range, avoid capturing areas where people expect privacy, keep recordings only as long as needed and store them securely. Angle cameras to cover your own door, yard and driveway rather than a neighbour's windows or the full sidewalk, use privacy masks where your camera supports them, and switch off audio recording if you do not need it. If you rent or live in a condo, check building rules before mounting anything in shared space.

Choosing the right mix

For many homes the sensible answer is a deliberate hybrid: local recording as the primary copy, with either a cloud backup or end-to-end encrypted storage for the camera most likely to catch a break-in. Put the strongest privacy protections on indoor cameras, and be most willing to pay for cloud on the outdoor camera that would be stolen first.

Small indoor cameras deserve particular care. A mobile camera such as the Enabot EBO Air can roam around a home, which makes its privacy settings and storage arrangements even more important; our research review (Enabot EBO Air review) notes it should not be your only security camera. And if you are weighing a mainstream cloud doorbell, our research review of the Ring Video Doorbell Pro 2 (Ring Video Doorbell Pro 2 review) looks at how central the subscription is to that product.

From a tech standpoint

Cloud storage buys you off-site evidence and convenience; local storage buys you lower running costs and fewer copies of your home on someone else's servers. Neither is automatically more secure, so judge each camera by where its full recordings go, what still leaves the house, and whether the footage is end-to-end encrypted. Keep indoor cameras as local as you can, and pay for the cloud only where losing the recorder would really hurt.