🏠 Cloud-free smart home: cameras, speakers, lights with zero data leakage
Smart home devices from Amazon, Google, and Tuya constantly send data to the cloud. Every time you ask Alexa a question, your voice is recorded and analyzed. Camera feeds are processed on remote servers. This guide shows you how to build a 100% local smart home where no data ever leaves your network.
The Core Components
- Home Assistant: Open source home automation hub. Runs on Raspberry Pi 4/5, old thin clients, or a VM. This is your central brain.
- Zigbee2MQTT + Zigbee stick: Zigbee is a low-power mesh protocol used by many smart devices (IKEA, Philips Hue, Aqara). Zigbee2MQTT translates Zigbee to MQTT, completely bypassing manufacturer clouds.
- ESPHome: Flash custom firmware onto ESP8266/ESP32 devices. Turns cheap WiFi devices into local-only components.
- VLAN isolation: Create a separate VLAN for IoT devices that has no internet access (or restricted access).
Step-by-Step Setup
1. Install Home Assistant
Download Home Assistant OS (free) and flash to a microSD card for Raspberry Pi. Or install via Docker on any Linux server. First boot takes 20 minutes. Access via http://homeassistant.local:8123
2. Add Zigbee2MQTT
Install the Zigbee2MQTT add-on from Home Assistant Community Store (HACS). Plug in a Zigbee USB stick (Conbee II, Sonoff ZBDongle-E, or Slaesh's CC2652RB). Pair devices by putting them in pairing mode — they connect directly to your stick, not to a cloud bridge.
3. Block Devices from the Internet
In your router (or firewall like OPNsense/pfSense), create a VLAN for IoT devices. Set firewall rules to block all traffic from IoT VLAN to WAN (internet), except for Home Assistant updates if needed. This forces all devices to communicate only locally.
4. Flash ESPHome for Custom Devices
For WiFi bulbs, switches, or sensors that don't have Zigbee, flash ESPHome firmware. This replaces the proprietary firmware with open source code that sends data only to your Home Assistant instance.
Local Voice Assistant (Replace Alexa/Google)
Rhasspy or Willow run completely offline. Set up with a USB microphone and speakers. Train your own wake word. All voice processing happens on your local hardware. No recordings sent to Amazon or Google.
Camera Security Without the Cloud
Use RTSP (Real-Time Streaming Protocol) cameras from Reolink, Amcrest, or Hikvision (with custom firmware). Configure them to stream to Frigate (local NVR with AI object detection) or MotionEye. Block camera internet access at the router level. View feeds only through Home Assistant dashboard.