'Our Customer Is Not the Police Department': Ring’s CTO Pushes Back On Privacy Concerns

Elijah Chiland
Elijah Chiland is a freelance reporter based in Los Angeles.
'Our Customer Is Not the Police Department': Ring’s CTO Pushes Back On Privacy Concerns

It's been a busy year for Ring, the home security giant best known for its video doorbells. In January, Ring rolled out the Ring Video Doorbell Wired, its smallest and least expensive doorbell yet. The Santa Monica-based company also unveiled an end-to-end encryption feature that adds an additional layer of protection to videos captured by a user's device. And Ring is now working on additional features, including a pet tracking system and a roving camera that can be remotely activated by customers to investigate disturbances.


But as Ring expands its user base, it is also drawing increased scrutiny from privacy and social justice advocates who are concerned about the Amazon-owned subsidiary's partnerships with law enforcement agencies and reports of racial profiling by users of Ring's Neighbors app.

Ring Chief Technology Officer Josh Roth spoke to dot.la about Ring's product development process and how his company approaches privacy and neighborhood safety.

Since the Amazon acquisition, Ring has developed some integrations with the Alexa system and other Amazon products. Are there ways this relationship may become even closer in the future?

Ring Chief Technical Officer Josh Roth

Ring Chief Technology Officer Josh Roth

At the end of the day it comes down to what we call a "better together" story. From our side, we can create better solutions and systems that aggregate devices in your home and give you a better way of leveraging those devices together—whether that's interactions between an alarm system and a light, or your Alexa acting as a sensor for other things. There's a tremendous amount of work to continue to iterate and improve on that. No doubt about it, there will be future integrations that continue to enhance that experience.

How much do you see Ring as a smart home company vs. a home security company? Are there ways you might use the tech stack you've developed in ways that move away from the home security focus you've had thus far?

Our mission is to make neighborhoods safer. I don't see that mission changing. We are a safety and security company. With that being said, things you may not think of as safety and security at the end of the day can become part of a safety and security system. An example of that would be anything that can give awareness about the state of a home. Your thermostat has home and away modes so that it can turn itself hotter or cooler depending on whether someone is at home. If you can integrate that into an IoT system to leverage that awareness and tie it to your alarm system, there's tremendous benefit for your safety and security. There's not always this cut-and-dry IoT space and safety and security space. The reality is that if you do things correctly, they actually merge into one.

And of course as more of these functions become automated, there's going to be growing concern about security. There have been some horror stories about hackers being able to spy on families through their Ring systems. How are you alleviating concerns that someone might gain access to a customer's footage?

Privacy and security are really foundational to everything we build. We start with a security and privacy-first mindset and then we try to introduce those features to our customers, and we try to do it in the quickest fashion possible. If you take a look back historically, Ring was the first in the safety and security space to require two-step verification; we were the first to introduce end-to-end encryption. Ring has never been breached, but we put things in place constantly to improve on security. Where we have to, we put in tighter controls. But when we do it, we make it extremely transparent to the customer. From my perspective, security is of the utmost importance, and I think everyone at Ring and Amazon would tell you the same thing.

You rolled out the end-to-end encryption feature earlier this year, but it's turned off by default. Why make it an opt-in setting rather than an opt-out?

End-to-end encryption implies that there's a key that can only be used by a very specific system or user. It requires us to actually turn off some features that our users actually like to have, because those keys can't be shared in all situations. For example, with the iteration of end-to-end encryption out there today you can't have a shared user. The reason for that is key management and how you would actually hand those keys off that shared user for a temporary or permanent amount of time, and which videos you would give access to. We opted to give something that was the most stringent control we could at launch, and to give the users asking for that the ability to turn it on—with the intent of iterating over time and adding more features like shared users.

There's a handful of items like that. Another use case would be a third-party integration. If you use Alexa, for example, to do video recall or to see who's at the front door, they don't have the keys because we don't have a method to pass the keys from a user's phone to Alexa devices. It would break our user promise around encryption and privacy. We really wanted to focus on the beginning experience of end-to-end encryption being as tight as we could, and then adding to it over time based on customer feedback.

How do you balance privacy concerns with the desire to give customers access to new features?

The baseline default experience that a user gets is the highest level of security that can be provided, and we constantly iterate and improve on that. I look at end-to-end encryption as an advanced security feature. I use the analogy of a hotel room. You have the top lock and you lock the door and you put the sign on the door. You may find you don't necessarily need all that, but it gives you peace of mind. So we want to offer that to our users. But the default standard encryption we provide still provides encryption in transit and encryption at rest. And we always examine it to see if we can improve on that. There is a tradeoff between end-to-end encryption and some of the features we know our users like. But I can tell you as a promise from Ring: We will always push toward providing more security and more options for our users with increased transparency. Any time we add something new they are going to have awareness of it. Any time we give them something around security, we're going to give them a choice to enable those items or not.

You mentioned that Ring's goal is to make neighborhoods safer. Is there an evaluation process as you add features to ensure that you are meeting this goal?

We believe in the power of the community and the power of the neighborhood. We also believe in the privacy of the neighborhood. In addition to privacy shutters on our cameras, we also have privacy zones. When you set up a motion zone, you can block out certain areas to respect the privacy of your neighbors if you choose to do so. Again, it's all put in the hands of customers for customer choice.

We also work with public safety agencies. We've been a great resource for COVID-19 information. We work with local fire and police departments. What that means is they have the ability to request videos (through the Neighbors app). They provide requests in a public way so that everyone is completely aware and it's transparent to the entire community what's being asked of them.

Those partnerships with law enforcement have been controversial. Are there ways you approach product development to ensure devices aren't being used as tools for mass surveillance?

Everything we do is customer first. Our customers are the neighbors who live in those neighborhoods. Our customer is not the police department. It's not the fire department. Our customer is the user who has a home, who's putting a Ring doorbell on their house. We start with that premise, and we build everything around that from a privacy and security perspective. Any time that there's anything involving a public safety agency, users have a choice and it's entirely up to them when and if they share information, when and if they share videos, when and if they work with those agencies. We've seen nothing but positive things come out of that. Kidnappings have been solved because of people working with neighborhood agencies. Neighbor advocates are helping track down things like package theft. We're big believers in people working together. We're big believers in customer choice.

Is there a limit to customer choice? Ring has said in the past it won't use facial recognition technology. What if customers want it? And are there other features that may be off the table?

It's a hard question to answer because I can't predict the future of what I haven't built yet. What I can tell you is we don't use facial recognition on any of our devices or services and we will never sell facial recognition technology to law enforcement. Privacy is so important to us. Anything we build will include these strong privacy protections for our neighbors.

We go through privacy reviews, legal reviews, customer reviews, and internal discussions. We make decisions as to whether we think the items we want to build meet the mission to make neighborhoods safer. Is it in the customer's best interest? Is it providing additional privacy, security, and transparency to the customer? If we can say yes to all of those things, I think we are able to build them. If we have question marks, we don't build them.

This interview has been edited for length and clarity.

🎬 Paramount and Skydance Are Back On
Image Source: Paramount

Happy Friday Los Angeles! Hope you all had a fantastic Fourth!!

🔦 Spotlight

Paramount and Skydance Media have rekindled talks to merge after negotiations abruptly halted in June. The proposed deal, contingent on approval from Paramount’s board, aims to combine Paramount’s extensive media holdings—including CBS, MTV, and Nickelodeon—with Skydance’s film expertise showcased in hits like "Top Gun: Maverick." This merger signals a potential transformation in the media landscape, positioning the new entity to compete more effectively amid challenges from streaming services and the decline of traditional cable TV.

Led by Shari Redstone, Paramount’s controlling shareholder via National Amusements, the deal represents a pivot towards revitalizing Paramount’s strategic direction amidst financial struggles and shareholder concerns. The involvement of major investors like RedBird Capital Partners and David Ellison underscores the financial backing aimed at stabilizing Paramount’s operations and addressing its $14 billion debt burden. Importantly, the agreement includes provisions to protect National Amusements from potential legal challenges, addressing previous hurdles that stalled earlier negotiations.

The deal also includes a 45-day period for Paramount to explore alternative offers, highlighting continued interest from other potential buyers like Barry Diller’s IAC and media executive Edgar Bronfman Jr. This flurry of activity underscores the significant stakeholders’ interest in Paramount’s future and its potential as a key player in a rapidly evolving media industry.


🤝 Venture Deals

LA Companies

  • Sidecar Health, a startup that offers personalized health insurance plans to businesses that allow members to see any doctor and pay directly at the time of service, raised a $165M Series D led by Koch Disruptive Technologies. - learn more

LA Venture Funds


Download the dot.LA App

😊🚘 Rivian's $5 Billion Lifeline

🔦 Spotlight

Volkswagen announced on Tuesday a significant investment of up to $5 billion in Rivian, a struggling electric truck manufacturer known for its vehicles' distinctive smiley-face design reminiscent of Volkswagen's iconic Beetle. This partnership marks a unique collaboration between the world's second-largest automaker and a startup grappling with profitability challenges akin to those faced by Tesla. Volkswagen's infusion of $1 billion initially, potentially rising to $5 billion pending regulatory approval, underscores its strategic pivot towards enhancing its electric vehicle (EV) software capabilities, an area where analysts believe the company has lagged.

For Rivian, which has received acclaim for its electric trucks and SUVs but struggles with production ramp-up and financial losses, the investment offers crucial financial backing. The company plans to utilize Volkswagen's expertise in manufacturing, leveraging the German automaker's annual production of nearly 10 million vehicles. This alliance aims to bolster Rivian's efforts to launch new models like the R2 midsize SUV and complete its Georgia factory, paused earlier this year to conserve funds. Rivian's stock surged upwards of 40% following the announcement, reflecting investor optimism in the company's future prospects.

Despite their differing corporate cultures—Volkswagen's traditional, structured approach contrasted with Rivian's agile tech startup ethos—the CEOs of both companies expressed mutual admiration and shared goals during the partnership announcement. The collaboration is expected to yield EV software solutions benefiting Volkswagen's various brands, potentially including Audi and Porsche, while allowing Rivian to maintain its brand identity and separate vehicle marketing strategies. This strategic partnership between Volkswagen and Rivian not only promises to revolutionize the electric vehicle market but also highlights the potential for collaboration between established automakers and innovative startups in Southern California, where Rivian is based. Here’s to hoping these smiling cars will balance out some of the inevitable LA road rage.

🤝 Venture Deals

LA Companies

  • HeyGen, a startup that allows users to generate videos with AI-created avatars that can lip-sync to provided audio, making it easier for businesses to create engaging video content, raised a $60M Funding Round at a $500M post-money valuation. The deal was led by Benchmark, with Conviction, Thrive Capital, and Bond Capital also stepping up. - learn more
  • Pomerium, a startup that provides a secure access platform that dynamically verifies user identities to ensure authorized access to applications and services, raised a $13.8M Series A round led by Benchmark and including previous investors Bain Capital, Haystack, and SNR. - learn more
  • Etched, a maker of transformer-specialized AI chips, raised a $120M Funding Round. - learn more
  • Rocketlane, a customer onboarding platform, raised a $24M Series B co-led by 8VC, Matrix Partners India, and Nexus Venture Partners. - learn more
  • Sift, a developer of unified observability solutions for hardware sensor data, raised a $17.5M Series A led by GV. - learn more
  • LOST iN, a travel media brand, raised a $4M Seed Round led by MaC Venture Capital. - learn more

LA Venture Funds


Download the dot.LA App

RELATEDEDITOR'S PICKS
Trending