Skip to content
TrustIQ

Hearthly T3 Thermostat

Connected device · Hearthly Home Co. · HT-T3

Device model
HT-T3
Publisher
Hearthly Home Co.
Platform
Hearthly firmware
Versions
Firmware 2.7.0
Scan date and region
Aug 17, 2026 · EU (Ireland lab)
Consent state
Default setup; optional "Usage insights" on
Scan method
Lab device — authorized network capture
Coverage
Partial · methodology 0.9

Findings and evidence (2)

  • Observed 1
  • Unknown 1

Evidence records show the request as captured, with identifiers and tokens redacted. Findings labeled Unknown state what could not be established; they are not findings of absence.

ObservedSeverity: ModerateConfidence: High

Home/away schedule events sent to an analytics company

With “Usage insights” on, transitions between Home and Away modes were sent to Tallymark Analytics with timestamps.

Why it matters
Occupancy schedules can indicate when a home is empty.
Conditions
Default setup, Usage insights on · 72 h lab
Confidence basis
Readable contents.
Limits of this finding
Effect of turning off Usage insights not tested.
What you can do
Turn off “Usage insights” in the Hearthly app.

Evidence records (1)

  • R-HT-0907Consent acceptedt+31:02:15

    POST https://collect.tallymark.example/v1/e

    Redacted request parameters for R-HT-0907
    ParameterValue
    eventmode_change
    modeaway
    didh••••(redacted)
UnknownSeverity: UnknownConfidence: High

Primary cloud traffic could not be inspected

65% of requests were unreadable.

Why it matters
Most device traffic is unassessed. Uninspected behavior is not counted as absence.
Conditions
All sessions
Confidence basis
Certificate pinning on api.orbitalcloud.example.

Evidence records (0)

No evidence record: this finding states what was not established.