Table of Contents
Smart Device End of Life: What Happens to Your Gear
Smart device end of life has four distinct failure modes, and only one of them looks broken. What stops working, what the law now requires, and how to plan.
A connected device rarely announces its own death. It keeps showing a green light, the app still opens, the camera still streams. What stopped was the stream of security patches, and nothing on the device says so. That is the ordinary shape of smart device end of life, and it is why the Federal Trade Commission found that nearly 89% of 184 surveyed smart products never disclosed how long updates would continue. The useful thing a family can do is learn the four distinct ways a device dies, because the planning is different for each.
Key Takeaways
- The FTC surveyed 184 connected products in November 2024. Nearly 89% did not disclose support duration on the manufacturer’s website, and 124 of the 184 had no discoverable support period even after ordinary internet searches.
- Four failure modes: patches stop, the app gets delisted, the cloud service shuts down, and the security certificates expire. Only the third one looks obviously broken.
- The FCC’s Cyber Trust Mark label is specified to carry either a product’s minimum support period end date or a statement that the device is not supported.
- The EU’s Cyber Resilience Act entered into force December 10, 2024. Vulnerability reporting obligations began September 11, 2026, and the main manufacturer obligations apply from December 11, 2027.
- Buying decisions should weight cloud dependency heavily. A $189 feeder with a $119.99-a-year video plan has a different end of life than one with a physical timer.
The four ways a connected device dies
Mode one: patches stop, nothing visibly changes. The manufacturer moves engineers to the next product. Firmware stays at whatever version shipped last. The device keeps working perfectly and becomes the least defended thing on your network. This is the most common mode and the hardest to notice.
Mode two: the app disappears. The hardware is fine, but the companion app is pulled from the store or stops supporting current phone operating systems. Existing installations may keep working until a phone is replaced. Then there is no way to set the device up again.
Mode three: the cloud service shuts down. The device’s core function lived on a server. When the server goes, the device goes. This is the mode people mean when they say “bricked,” and it is the only one that produces an obvious, dateable event.
Mode four: certificates expire. This one is invisible and worth understanding. Connected devices verify servers using digital certificates that chain back to a small set of root certificates, and those roots have expiry dates. A device that can no longer receive firmware updates cannot receive new roots. One day it stops being able to establish a secure connection, with no apparent cause, years after the last update.
Mode four is the reason “it still works” is not the same as “it is still supported.”
What the FTC actually measured
In November 2024 the FTC published a staff survey of 184 smart devices spanning categories including hearing aids, security cameras and door locks. Nearly 89% did not disclose on the manufacturer’s website how long the product would receive software updates. When staff ran basic internet searches, two-thirds of the devices — 124 of 184 — still had no discoverable support duration.
Samuel Levine, then director of the Bureau of Consumer Protection, stated the consumer harm: “Consumers stand to lose a lot of money if their smart products stop delivering the features they want.”
The staff paper added a legal note that has not been widely absorbed. For products sold with a written warranty, failing to inform buyers how long software support will last may violate the Magnuson-Moss Warranty Act, and express or implied claims about a product’s continued usability may raise FTC Act issues.
That is the gap. Not that companies end support, which is inevitable, but that they do not tell you when.
The dependency ladder
| What the device depends on | What happens when it stops | Can you design around it? |
|---|---|---|
| Local firmware only | Keeps working indefinitely; security risk accumulates | Yes: isolate on a separate network |
| Companion app in a store | Works until you change phones, then cannot be reconfigured | Partly: keep an old device, or export settings |
| Vendor cloud account | Remote access and automations stop; local control may remain | Sometimes: check for a local-only mode before buying |
| Paid cloud storage | Recording and history stop; live view often continues | Yes: that is a subscription decision, not a hardware one |
| Third-party assistant integration | Voice control stops when either side drops support | Rarely: you depend on two companies agreeing |
| Valid root certificates | Device silently loses the ability to connect securely | No: this one requires firmware, so it is a hard deadline |
Read down the last column. Two of six rows are things a family can genuinely plan around, which makes the purchase decision more important than any setting.
Current products show the ladder clearly. The Petlibro Granary 2 Vision, launched September 19, 2026 at $189.99, has an optional cloud video plan at $119.99 a year and a health-tracking subscription at $59.99. Orion’s $2,195 mattress pad, reviewed September 18, 2026, transmits health data to the cloud for processing, and its founder has acknowledged the security exposure if a third party is breached. Neither is unusual. Both tell you where on the ladder the product sits, which is the information you need.
What is changing in law
Two regulatory efforts are converging on the same disclosure.
In the United States, the FCC’s U.S. Cyber Trust Mark, whose framework was adopted in March 2024, specifies that the QR code beside the label carries the product’s minimum support period end date, or a statement that the device is not supported. The ioXt Alliance became lead administrator in April 2026 and accreditation bodies were recognised in September 2026, so labels are arriving gradually. Note the exclusions: phones, computers and routers are outside the program.
In the European Union, the Cyber Resilience Act entered into force on December 10, 2024. It imposes cybersecurity requirements covering the planning, design, development and maintenance of connected products, and requires manufacturers to handle vulnerabilities across the product lifecycle. Reporting obligations for actively exploited vulnerabilities began September 11, 2026; the main obligations apply from December 11, 2027. Covered products include baby monitors and smartwatches, and compliant products carry CE marking.
Neither regime abolishes end of life. Both make the date findable, which is all a buyer needs.
How to Teach Your Kid About Smart Device End of Life
Ages 5–8: pull the plug on the router
Turn off the internet for twenty minutes and walk the house together, testing what still works. The lamp works. The speaker does not answer. The television plays a disc but not a show. Children find this genuinely fascinating and it builds the right instinct early: some things need the outside world and some do not.
Ages 9–12: draw the dependency map
Pick one device and draw it in the middle of a page. Around it, draw everything it needs: electricity, Wi-Fi, the router, the company’s servers, the app, the phone, the account. Then cross out one item at a time and say what breaks. This is fault-tree reasoning, which is what reliability engineers actually do, and a ten-year-old can do it with a pencil.
Ages 13+: find the policy, write the email
Give your teenager a device and two tasks. First, find the manufacturer’s stated support period, which will usually involve failing, because the FTC found 124 of 184 products had nothing discoverable. Second, write a one-paragraph email to support asking for the date. Having them experience the absence of the information teaches more than being told about it. Our annual smart home audit checklist folds this into a yearly routine.
The question to ask: “If this company disappeared tomorrow, which parts of this device would still do their job?”
A good answer names the local functions, the cloud functions, and the ones that quietly depend on a third company nobody thought about.
What to do at home
Ask for the date before you buy, in writing
One sentence to support: “Through what date will this model receive security updates?” Keep the reply. If the answer is a non-answer, that is still information, and it should move you toward a competitor who answers.
Prefer local control when it exists
Some thermostats, locks and switches work fully without an account. Many do not. The specification sheet rarely says, but the support forum always does. A device with a local mode survives mode three entirely.
Put unsupported devices on their own network
A device past end of support does not have to leave the house. It has to leave the main network. Fifteen minutes in the router settings moves cameras, speakers and appliances to a guest network where a compromise cannot reach laptops. Our router security walkthrough covers the specific settings.
Factory reset before anything leaves
Selling, donating or binning a connected device without a factory reset hands over Wi-Fi credentials and sometimes recorded media. The FTC’s 2023 Ring order required deletion of unlawfully obtained videos and face embeddings predating 2018, which is a reminder that stored media on company servers and on devices both persist longer than the owner’s interest.
Budget for replacement, not repair
For a $40 smart plug, end of support means replacement. For a $2,195 appliance, it means asking hard questions first. Put connected hardware in a mental category with a shorter life than its mechanical equivalent, because the firmware will expire before the motor does.
What not to do
Do not keep an out-of-support camera or microphone pointed into a bedroom because it still turns on. The thing that ends at end of support is the fix for whatever is discovered next, and a camera is the worst place to accept that risk.
What to Watch For Over the Next 3 Months
- Week 4: Check the firmware date on every connected device in the house. Anything older than a year without an available update is a candidate for the separate network.
- Month 2 red flags: A support email that bounces or goes unanswered for two weeks. An app update that drops support for your phone’s operating system version. A company announcing a change in ownership, which is frequently followed by product line pruning.
- Month 3 self-check: Look at packaging for anything you buy. If a Cyber Trust Mark is present, scan the QR code and read the support end date before paying. If no label exists, ask the retailer. Demand is what makes the disclosure normal.
Frequently Asked Questions
Does a smart device stop working when support ends?
Usually not immediately. The most common outcome is that it keeps functioning while no longer receiving security patches, which makes it a liability rather than a paperweight. Outright failure happens when a cloud service shuts down or when root certificates expire and no firmware update is available.
How long should a connected device be supported?
There is no universal answer yet, which is the problem. The FCC’s label is designed to disclose each product’s minimum support period, and the EU’s Cyber Resilience Act requires manufacturers to handle vulnerabilities across the lifecycle with main obligations from December 2027. Until those are widespread, ask the manufacturer directly.
Is it safe to keep using an unsupported device?
It depends on what it can reach and what it can capture. A smart plug on an isolated network is low risk. A camera or microphone with no further patches, sitting on the same network as your laptops, is not. Segmentation changes the answer more than anything else.
What should I do with old connected devices?
Factory reset, remove the account, then recycle through an electronics programme. The reset step is the one people skip, and it is the one that matters, because Wi-Fi credentials and sometimes recorded media stay on the device.
Do subscriptions make end of life worse?
They make it clearer. A product whose core function depends on a paid cloud service has an end of life you can predict, which is more honest than a product that quietly stops being patched. Our piece on what the wearables market tells families looks at how those subscription economics drive company behaviour.
About the author
Ricky Flores is the founder of HiWave Makers and an electrical engineer with 15+ years of experience building consumer technology at Apple, Samsung, and Texas Instruments. He writes about how kids learn to build, think, and create in a tech-saturated world. Read more at hiwavemakers.com.
Sources
- Federal Trade Commission. (2024, November 26). “Smart Products Surveyed Fail to Provide Consumers with Information on How Long Companies will Provide Software Updates.” FTC Press Release. https://www.ftc.gov/news-events/news/press-releases/2024/11/smart-products-surveyed-fail-provide-consumers-information-how-long-companies-will-provide-software
- Federal Communications Commission. “Cybersecurity Labeling for Internet of Things (U.S. Cyber Trust Mark).” FCC. https://www.fcc.gov/CyberTrustMark
- European Commission. “Cyber Resilience Act.” Shaping Europe’s Digital Future. https://digital-strategy.ec.europa.eu/en/policies/cyber-resilience-act
- Fagan, M., Megas, K., Watrobski, P., Marron, J., & Cuthill, B. (2022). Profile of the IoT Core Baseline for Consumer IoT Products (NIST IR 8425). National Institute of Standards and Technology. https://csrc.nist.gov/pubs/ir/8425/final
- Federal Trade Commission. (2023, May 31). “FTC Says Ring Employees Illegally Surveilled Customers, Failed to Stop Hackers from Taking Control of Users’ Cameras.” FTC Press Release. https://www.ftc.gov/news-events/news/press-releases/2023/05/ftc-says-ring-employees-illegally-surveilled-customers-failed-stop-hackers-taking-control-users
- TechCrunch. (2026, September 19). “Petlibro’s new AI-powered feeder…” TechCrunch. https://techcrunch.com/2026/09/19/petlibros-new-ai-powered-feeder-is-a-game-changer-for-multi-cat-homes/
- TechCrunch. (2026, September 18). “I’m so mad that I love Orion’s $2,195 AI mattress pad.” TechCrunch. https://techcrunch.com/2026/09/18/im-so-mad-that-i-love-orions-2195-ai-mattress-pad/
