Arlo Technologies, Inc. is an independent, publicly traded smart-home security camera maker (NYSE: ARLO) that spun off from NETGEAR via a stock distribution completed December 31, 2018. Its cameras, doorbells, and the Arlo Secure app capture video, audio, and photos, and its privacy notice describes collection of device identifiers (including advertising IDs), location information, and optional AI facial-recognition processing of face prints. Arlo's business runs on paid subscriptions (about 5.7 million cumulative paid accounts and $330.5 million annual recurring revenue at the end of 2025) rather than an advertising marketplace, though its privacy notice permits sharing account, device, usage, location, and billing information for cross-contextual behavioral advertising, and its apps and website use third-party advertising and analytics trackers. Its law-enforcement guidelines state that stored videos are produced only in response to a valid search warrant, and it publishes bi-annual transparency reports with request counts. Track record includes a January 2023 class action over a rescinded free cloud-storage promise (later reversed by the CEO) and two patched local-access vulnerabilities disclosed in 2019.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
15 ON FILE
COLLECTION
The Arlo Secure iOS app's Apple privacy label discloses that data including precise location, user content, contact information, and identifiers may be collected and linked to the user's identity, with identifiers and Device ID used for third-party advertising.
Arlo's privacy notice states that it collects the photos, audio, and videos captured from users' devices, along with device identifiers including advertising IDs, location information, and — for its optional AI-based facial-recognition features — facial images and face prints, with user-controlled settings for that biometric processing.
Arlo's Privacy Pledge states that cloud recordings are retained only for the duration of the customer's chosen subscription plan unless manually deleted, after which they are automatically deleted, and that accounts can be created with minimal information.
Arlo publishes a bi-annual Information Request Report with counts of government demands and its responses (1H 2025: 15 subpoenas with 12 receiving no response, 100 search warrants, 0 other court orders), and the report discloses that Verisure owns Arlo's European commercial operations and may respond to European compulsory requests.
Arlo Technologies is an independent public company (NYSE: ARLO): its FY2025 Form 10-K documents that former parent NETGEAR completed a special stock dividend distributing all 62,500,000 Arlo shares it owned to NETGEAR stockholders on December 31, 2018, ending the parent-subsidiary relationship.
Arlo's law-enforcement guidelines state that subscriber information will not be released absent valid legal process and that stored videos are produced only in response to a valid search warrant meeting the Fourth Amendment's probable-cause requirement; the guidelines describe no warrantless emergency video-disclosure pathway.
Arlo's privacy notice states that its policy permits sharing account, device, usage, location, and billing information, and linked third-party account information, for cross-contextual behavioral advertising as defined by California law — a practice several state privacy laws classify as a "sale" or "share."
Arlo's FY2025 annual report states the company generates revenue primarily from paid subscription services and device sales — approximately 5.7 million cumulative paid accounts and $330.5 million in annual recurring revenue as of December 31, 2025 — a business model that does not depend on selling user data to advertisers.
Arlo's Privacy Pledge commits that it does not monetize personal data and will not share customer videos or account information with law enforcement absent a legally enforceable search warrant or court order, and never shares videos for private litigation without consent.
In July 2019, two high-severity vulnerabilities in Arlo base stations (CVE-2019-3949 and CVE-2019-3950), discovered by security firm Tenable and disclosed jointly with Arlo, were patched; exploitation required local network or physical access to the base station.
In January 2023, a class action lawsuit filed in Michigan federal court alleged Arlo falsely advertised its security cameras by promising "7 days FREE Cloud Recordings" and then announcing an end-of-life policy that removed the paid-for cloud storage feature.
In February 2023, after public backlash to the retroactive end-of-life policy, Arlo CEO Matthew McRae announced the company would not remove free cloud video storage for existing customers, extended end-of-life dates for older cameras to 2025, and committed to security updates through 2026.
Arlo maintains a published responsible-disclosure program in which independent security researchers test its products, alongside penetration testing and continuous monitoring, per its Privacy Pledge; no large-scale breach of Arlo's cloud video platform was identified in this research.
The Arlo Secure app's Apple privacy label lists identifiers under "Data Used to Track You," meaning they may be used to track users across apps and websites owned by other companies, and lists Advertising Data among data linked to identity.
Arlo's privacy notice describes passive tracking across its apps, websites, and emails using cookies, pixels, log files, embedded scripts, SDKs, session replays, and web beacons, in conjunction with first- and third-party advertisers, ad networks, and analytics providers; Arlo Secure subscribers are automatically opted out of interest-based in-app advertising.