What should I consider with a smart or embedded device?¶

Smart and embedded devices may hold relevant data, but they often behave differently from phones and computers.

Evidential caution: that a small or simple-looking device has little evidential value. Cameras, doorbells, vehicle systems, sensors, smart speakers, trackers and industrial controllers may retain logs, media, account links and network identifiers.

What this means¶

Some devices store data locally; others rely mainly on a companion application, cloud service, hub or provider account. The physical device may hold only part of the evidence.

Consider operational and safety risks. An embedded device may control access, alarms, machinery, heating, medical equipment or vehicles.

Where the device is unfamiliar, proprietary or part of a wider system, seek specialist support before isolation or power removal.

What to check or do next¶

• Record the device in place before moving it. Photograph its location, orientation, display, lights, cables, labels, make, model and serial number.
• Note whether it is powered, connected, recording, moving, responding or linked to another system.
• Do not press buttons, remove batteries, reset the device or connect it to an application merely to identify it. Those actions may clear data, change configuration or trigger synchronisation.
• Record nearby hubs, routers, phones, controllers and removable storage that may be linked to it.
• If continued operation creates an immediate safety risk, intervene proportionately and document what was changed.
• Preserve account, network and device identifiers where visible, but do not improvise technical extraction.