Baby monitor without the cloud: why video of your child should never leave your Wi-Fi
When you open a baby monitor app and see your child on a second device, it feels direct. With most apps, it isn't: video and audio travel through the provider's servers — often across borders, usually tied to an account, sometimes stored for good.
For a device that sits in a nursery all night, that's a strange thing to accept as normal.
What "through the cloud" actually means
A cloud baby monitor first sends the video stream from the nursery to the internet. A server receives it and relays it to your second device. That has upsides for the provider: it works from anywhere, and it enables paid features like recordings and "highlights".
It also has consequences that rarely make the marketing page:
- Your child is on someone else's servers. Even with correct encryption, the infrastructure belongs to somebody else — and you have to trust it.
- An account is mandatory. Email, password, often payment details: one more profile that can be breached or leaked.
- No internet, no baby monitor. If your connection or the provider's service goes down, the monitor dies — exactly when you're relying on it.
- Security holes scale. Several well-known baby cameras have had streams exposed on the open internet. Not because one camera was bad — because a central service is a central target.
The alternative: device to device
Technically, there is no reason your child's video needs to leave the house. Two devices on the same Wi-Fi can talk to each other directly — the way two computers on a home network share files without any server in between.
That is exactly how Pilu works:
- Direct connection on your Wi-Fi. The two devices connect to each other through your local network. There is no Pilu server anything could be sent to — the router doesn't even need internet access.
- End-to-end encrypted. The stream is protected with the same technology that secures video calls (DTLS-SRTP). Anyone eavesdropping on your Wi-Fi sees noise.
- The QR code is the key. When pairing, you scan a QR code from the other device. It carries a cryptographic fingerprint — your device will only ever accept exactly that counterpart. A stranger's device on the same Wi-Fi cannot slip into the middle.
- No account, no recording, no analytics. There is nothing to sign up for and nothing that gets stored. What happens at night stays with you.
"So what's the catch?"
Honesty is part of the deal: a pure direct connection cannot show you a live stream while you're at the office. Pilu is deliberately a baby monitor for the situation baby monitors were invented for — you're at home or travelling together, and your child sleeps in the next room. For hotels and camping, an Android device can spin up its own small network, no router needed.
If you need remote access from far away, you need a cloud — and then you should look very carefully at who runs it.
Checklist: how to spot a private baby monitor
- **Does it work with the router's internet unplugged?» If the app runs without internet, it cannot phone home.
- Does it require an account? If yes: what exactly for — and where does the data live?
- Does it record? A baby monitor has no business storing anything.
- Does the privacy policy list analytics providers? In a nursery app, that's a red flag.
- How does pairing work? QR-code pairing with a device fingerprint keeps strangers on the same Wi-Fi out.
Pilu answers all five the way you'd want for your child — not because we're nice, but because the app literally cannot do otherwise. That's how we built it.