Skip to content
Xiaomi
SMART HOME & IOT
LAST UPDATED 19 AUG 2026

WHAT THE POLICIES SAY

Xiaomi is a Chinese consumer-electronics maker of smartphones, IoT/smart-home devices and the Mi Home/Xiaomi Home app, operated under the entity Xiaomi Communications Co., Ltd. 'along with our global affiliates,' and publicly listed as Xiaomi Corporation (HKEX: 1810/81810). Its global privacy policy discloses collection of granular device and network identifiers (IMEI/OAID, MAC address, IP address, advertising IDs such as GAID/Android ID, SIM/IMSI information) plus app-level identifiers (VAID, OAID, AAID, Instance ID) and a dedicated 'Advertising Optimization Data' category obtained from advertisers; it discloses sharing personal information with named categories of business partners including 'advertising networks, advertising platforms and measurement providers.' Xiaomi Corporation's FY2025 annual report, filed with the Hong Kong Stock Exchange, shows a dual-class Weighted Voting Rights (WVR) share structure in which founder/Chairman Lei Jun holds Class A shares through a named vehicle, Smart Mobile Holdings Limited, and states the company was not involved in any material litigation or arbitration during the reporting period. No third-party-confirmed breach or regulator order specific to Xiaomi's data-privacy practices was independently verified with a primary source in this research.

TIMELINE

NO ENTRIES ON FILE YET.

TOOLS WE RECOMMEND

PLUS

RECEIPTS

7 ON FILE
COLLECTION
Xiaomi's global privacy policy discloses that it collects a wide range of device and network identifiers during use of its services, including device manufacturer/model, OS and software versions, IMEI/OAID and other unique device IDs (serial number, MAC address, IP address, advertising IDs such as GAID and Android ID), SIM-related information, and granular hardware performance metrics such as CPU, battery, screen resolution, camera lens model, and number of times the screen was woken or unlocked.
privacy.mi.com ↗
OWNERSHIP TRANSPARENCY
Xiaomi's global privacy policy names the operating entity as 'Xiaomi Communications Co., Ltd., along with our global affiliates,' collectively referred to as 'Xiaomi' throughout the policy.
privacy.mi.com ↗
[2026-04-28] · OWNERSHIP TRANSPARENCY
Xiaomi Corporation's FY2025 annual report, filed with the Hong Kong Stock Exchange (stock codes 1810/81810), discloses that founder and Chairman Lei Jun's Class A share conversions were made through a named holding vehicle, Smart Mobile Holdings Limited, and Vice Chairman Lin Bin's through Apex Star LLC, under the company's dual-class Weighted Voting Rights structure regulated by HKEX Listing Rules.
www1.hkexnews.hk ↗
SHARING
Xiaomi's privacy policy names 'advertising partners, such as advertising networks, advertising platforms and measurement providers, that help us deliver, measure and improve advertising and related services' as one of the categories of third parties with which it shares personal information, alongside content/feature providers and general service providers.
privacy.mi.com ↗
[2012-08-01] · TRACK RECORD
Have I Been Pwned's breach catalog lists an unverified breach, "Xiaomi" (xiaomi.cn), breach date 2012-08-01, affecting approximately 7,088,010 accounts. Data classes exposed per HIBP: Email addresses, IP addresses, Passwords, Usernames. HIBP flags this breach as unverified. Source: Have I Been Pwned (haveibeenpwned.com), CC BY 4.0.
haveibeenpwned.com ↗
[2026-04-28] · TRACK RECORD
Xiaomi Corporation's FY2025 annual report states that the company was not involved in any material litigation or arbitration during the reporting period, and that the Directors were not aware of any material litigation or claims pending or threatened against the company — a self-declared clean-litigation statement in the audited annual filing, not an independent third-party audit.
www1.hkexnews.hk ↗
TRACKING TECH
Xiaomi's privacy policy discloses collection of app-level tracking identifiers — VAID, OAID, AAID and Instance ID — for apps installed on the device, and separately defines an 'Advertising Optimization Data' category consisting of unique identifiers (IMEI, OAID, or GAID) obtained from advertisers plus, in some cases, ad-click conversion performance data tied to the user's use of advertising services.
privacy.mi.com ↗

DATA SOURCES

Have I Been Pwned (haveibeenpwned.com)
CC BY 4.0 · HAVEIBEENPWNED.COM ↗
Claims are summarized from these sources and may be edited from the original.
LAST REVIEWED 2026-08-19 · METHODOLOGY v1.7