Google Home Developer Policies Overview (original) (raw)

These policies ("Google Home Developer Policies") are designed to provide requirements to developers using and building integrations on Google's platform (including the Google Home Developer Center and the tools and materials available through the Google Home Developer Center) that lets you integrate your products, apps, and services with Google's smart home products and services ("Google Home Developer Platform"), including during any transition period from Actions on Google.

The Google Home Developer Policies are organized into four sections:

  1. The General Policies, which apply to any developer integrating with the Google Home Developer Platform.
  2. The Smart Home API Integrationssection governs the use of cloud to connect your devices to Google to enable control via voice, the Google Home app, orthe Home APIs & Home Hub Runtime Integration.
  3. The Matter Integrations section outlines how to ensure your Matter device is compatible with the Google Home Developer Platform.
  4. The Home APIs & Home Hub Runtime Integration section applies to developers integrating with the Home APIs & Home Hub Runtime software to make a device that can act as a hub for Google Home.

Some partners may have access to additional APIs and be subject to varying terms of service and policies, including, but not limited to, the Google API Terms of Service and Google API Services User Data policy. For the purposes of this policy, the term integration applies to the project, app, or individual integrations within that project. This policy applies to all aspects of integrations with the Google Home Developer Platform. For any policies that are not expressly discussed within this Google Home Developer Policy, the Actions on Google policies will apply to all aspects of those integrations. In the event of any conflict between these Google Home Developer Policies and others, these Google Home Developer Policies will apply.

Avoiding a policy violation is always better than managing one, but when violations do occur, we're committed to ensuring developers understand how they can bring their use of the Google Home Developer Platform into compliance.

If we find that your integration violates our policy, you will receive a notification with a specific reason for deprecation, removal, or rejection. Repeated or serious violations of the policy may result in termination of individual, related or partner accounts.

We may take action based on a number of factors, including, but not limited to, a pattern of harmful behavior or high risk of abuse. We identify risk of abuse based on factors, including, but not limited to, previous violation history, user feedback, and misuse of popular brands, characters, and other assets.

As a developer of applications and services connecting to the Google Home Developer Platform, you often collect and manage sensitive user information. By accessing or integrating with the Google Home Developer Platform (including any developer materials made available through the Google Home Developer Platform), you agree to the following policies.

1. General Policies

Privacy and Security

User Data

You must be transparent in how you handle user and/or device data (e.g., information provided by a user, collected about a user, and collected about a user's use of the integration or device). This policy establishes the Google Home Developer Platform minimum privacy requirements; you or your integration may need to comply with additional restrictions or procedures if required by an applicable law.

All integrations must adhere to the following:

Intellectual property

We don't allow integrations or developer accounts that infringe the intellectual property rights of others, including trademark, copyright, patent, trade secret, and other proprietary rights. We also don't allow Integrations that encourage or induce infringement of intellectual property rights.

We will respond to clear notices of alleged copyright infringement. For more information or to file a Digital Millennium Copyright Act request, please visit our copyright procedures.

If you are a trademark owner and you believe an integration is infringing on your trademark rights, we encourage you to reach out to the developer directly to resolve your concern. If you can't reach a resolution with the developer, please submit a trademark complaint through this form.

Impersonation

We don't allow integrations that mislead users by impersonating someone else (e.g., another developer, company, entity) or another Integration, or falsely applying affiliation. This includes misusing icons, descriptions, display names, or other integration features that could mislead users.

Here are some examples of violations:

We don't allow integrations that infringe copyright. Modifying copyrighted content may still lead to a violation. Developers may be required to provide evidence of their rights to use copyrighted content.

Please be careful when using copyrighted content to demonstrate the functionality of your Integration. In general, the safest approach is to create something that's original.

Here are some examples of copyrighted content that is often used without authorization or a legally valid reason:

We don't allow integrations that induce or encourage copyright infringement. Before you publish your Integration, look for ways it may be encouraging copyright infringement and get legal advice if necessary.

Here are some examples of violations:

Trademark infringement

We don't allow integrations that infringe on others' trademarks. A trademark is a word, symbol, or combination that identifies the source of a good or service. Once acquired, a trademark gives the owner exclusive rights to the trademark usage with respect to certain goods or services.

Trademark infringement is the improper or unauthorized use of an identical or similar trademark in a way that is likely to cause confusion as to the source of that product. If your Integration uses another party's trademarks in a way that is likely to cause confusion, your Integration may be removed.

Counterfeit

We don't allow integrations that sell or promote the sale of counterfeit goods. Counterfeit goods contain a trademark or logo that is identical to or substantially indistinguishable from the trademark of another. They mimic the brand features of the product in an attempt to pass themselves off as a genuine product of the brand owner.

Deceptive behavior

We don't allow integrations that attempt to deceive users. Integrations must provide an accurate description of their functionality and perform as reasonably expected by the user. Integrations must not attempt to falsely mimic system functionality or warnings of any kind. Any changes to device settings must be made with the user's knowledge and consent and be easily reversible by the user.

Misleading Claims

We don't allow integrations that contain false or misleading information or claims, including description, integration name, or icon. Don't try to imply an endorsement or relationship with another entity where none exists.

Examples of misleading claims include:

Malicious behavior

We don't allow integrations that steal data, secretly monitor or harm users or that are otherwise malicious. This includes, but is not limited to, engaging device functionality such as audio or video recording without accurately representing the state of the device to the user.

We don't allow integrations that interfere with, disrupt, damage, or access in an unauthorized manner the user's device or other devices, computers, servers, networks, application programming interfaces (APIs), or services. This includes other integrations, any Google service, and the device's network.

All integrations that collect user data must comply with the User Data policy and fully disclose their functions.

The following are explicitly prohibited:

Integrations must not provide any means to activate or access functionality that violate these terms.

Security vulnerabilities

If your integration is associated with a security vulnerability that could be exploited to compromise another integration, application, device, or service, we may deprecate or remove it to protect users.

If your integration is associated with a security breach leading to the accidental or unlawful device or network malfunction; or destruction, loss, alteration, unauthorized disclosure of, or access to, data on systems managed by or otherwise controlled by you, you must disclose this to Google in writing in a timely manner after the breach discovery. You must cooperate with Google in the investigation, coordination, and resolution of the malfunction or data breach.

Data feeds

If you provide us with data, including, but not limited to content metadata, via a data feed or other mechanism, the data must comply with these policies, including the section on Intellectual Property.

Your provision of data to us must not include user personally identifiable information (PII), including but not limited to persistent device ID, phone numbers, or email addresses. You must correctly implement all technical requirements and provide content for all required fields. The data provided must be relevant to the use case of feed and accurate. We may disable the feed (or a portion of it), disable use of the data, or remove any related integrations for violations of these policies or if they create a poor user experience.

Support Duration

Conflicting terms

These policies do not limit or amend any terms of service or other agreements that apply to the user's use of the applicable Google products or services, unless the policies expressly state that they are amending specific terms of service or agreements.

Enforcement

If your integration has violated any of our policies, we may take one or more enforcement actions against your integration or your developer account, as outlined below. In addition, we'll notify you with relevant information about the enforcement action we've taken, along with instructions on how to appeal if you believe we've taken enforcement action in error.

Please note that removal or administrative notices may not indicate each and every policy violation present in your integration. You are responsible for addressing any policy issue and conducting extra due diligence to ensure that the remainder of their integration is fully policy compliant. Failure to address policy violations in all of your integrations may result in additional enforcement actions, including permanent removal of your integration or account termination.

Repeated or serious violations (such as malware, fraud, and integrations that may cause user or device harm) of the terms of service or policies for integrations on Google may result in termination of individual or related integrations on Google developer accounts.

Rejection

Limited visibility

Account termination

Because the integrations within the terminated account are removed, users will not be able to see the integration's existing listing, existing user installs, statistics, and ratings.

Appealing an enforcement action

We will reinstate integrations if an error was made and we find that your integration does not violate the terms of service and policies for integrations on Google. If you've reviewed the policies carefully and feel that our enforcement action may have been in error, please follow the instructions provided in our notice to you to appeal our decision. You can also contact ushere.

2. Smart Home API Integrations

This section on Smart Home API Integrations governs the use of cloud to connect your devices to Google to enable control via voice, the Google Home app, or the Home APIs & Home Hub Runtime. Security or surveillance integrations must not log PII of individuals outside the primary user without their consent. For example, doorbell integrations cannot log information about who may be at the door without the express consent of that individual.

We do not allow integrations that may violate applicable laws. This includes, but is not limited to, integrations that instruct passenger transport vehicles to move, allow for the controlling of pool covers from inside the home, or any other safety-related or other prohibited features.

Secondary User Verification

Google requires partners to enable a secondary user verification for any operation that may change the device state to a non-secure or disabled state, such as unlocking a door, turning off a camera, disabling a security system, or opening a device that may have a safety concern.

While the nature of the security and safety precautions may vary by the type of device, at minimum these devices must require account linking and a secondary user verification, such as confirmation on a secured mobile device or a password/PIN. Irrespective of the nature of the integration, adding the additional layer of security is required to comply with Google's policies. However, with regards to cloud integrations, after the user has established a secondary verification, you may provide an opt-out option for the user. The opt-out language must be precise and clear to the user.

Works with Google Home Certification

When users search for and buy devices labeled with the Works with Google Home badge, they should expect robust functionality and a safe, reliable, and seamless experience. Developers must also meet the following requirements for device certification and use of the Works with Google Home badge:

Functionality

The Smart Home API supports device types and traits to match the functionality of smart home devices. Device type representation should be accurate and specific based on the identity of the device itself. This also applies to Matter-enabled devices, which should expose to the Google Home Developer Platform all the standards-compliant Matter clusters and functionality made available to any non-Google ecosystem. For example, if you have a smart switch that may control lights, then the device type that you use is Switch, since that represents the nature of the physical device. Integrations that use incorrect device types or traits (e.g., a space heater that is implemented as a dimmable light) may be removed at Google's discretion. Google provides guides on devices and their required functionalityhere.

Additionally, if new device traits are added to your device via any other non-Google ecosystem or integration, those capabilities must be made accessible to Google users at the same time. As an example, for color light bulbs, users should be able to change the color of the bulbs, turn the bulbs on and off, adjust the bulbs' brightness, etc., through Google interfaces. Further, if new features are made available through device updates, these traits and/or clusters must also be available to the Google Home Developer Platform at launch.

Google reserves the right to not certify submissions if your device fails Google testing, fails to integrate all functionality present on the device with compatible Smart Home API traits allowing Google to provide a complete experience, is incompatible with standard Matter clusters, or evinces performance or reliability issues. Likewise, if local reporting ofMatter cluster state changes proves to be unreliable or latent, device certification may be denied or revoked.

Reporting User Configuration Changes

You will report device configuration updates in your ecosystem to Google; for example if the developer updates functionality like supported traits, or if the user adds, reconfigures, or removes a device, the developer must report those updates to Google. This eliminates the need for users to remove or add the device to their account to receive updates after they make an update in the developer app. This can be accomplished through the Request Sync APIor the appropriate Matter descriptor clusters.

Google Device Control Authorization Page

In order to comply with our legal and privacy policies, your OAuth page should show that your app is linking / sharing data with Google, not Google Home or Google Assistant. You must have a Google authorization statement such as "By signing in, you are authorizing Google to control your devices."

Persistent Connections

With the exception of Wake-on-LAN devices, cloud connected smart devices should have a persistent connection for cloud control, whether that's through the device itself, or through a stationary partner hub. For example, mobile devices and tablets cannot be used as intermediaries for smart home devices. For devices with low power states that disconnect the device from its connectivity protocol such as WiFi, the device should implement methods to enable waking up the device for cloud control.

Safety Certificate

There are certain devices that may have safety implications, such as cooking appliances that may get hot enough to be a safety concern. For any device that can potentially pose a heightened safety risk, we ask that you share the UL certificate (or similar safety certification) for that device. Additional details on safety certificate requirements can be foundhere.

Quality

Maintaining a high level of performance and reliability is key to jointly delivering helpful user experiences. Partners can access metrics on the usage and performance of their integration by visiting their Google Cloud Platform project page. More information on accessing performance metrics can be foundhere.

After the initial certification, developers should maintain an acceptable level of performance for their devices. There are multiple aspects of performance:

  1. Latency and reliability associated with executing commands
  2. Reliable account linking and token refresh
  3. Report state accuracy and latency of reporting state changes
  4. Properly sync and resync devices to Google as the devices change

Quality expectations are outlined on a device type level in the Smart Home API Documentation. Persistent failure to meet these expectations could result in your integration having reduced visibility, or in extreme cases being disabled, until performance is improved.

Name requirements

Your integration name is how users discover and account link to your project. Integration names are unique, so once a name is approved, no other project can register using the same name.

Integration Names must meet the following requirements:

We don't allow integration names that are:

Registration

Each developer must register their integration with the Google Home Developer Center and provide applicable details, such as the device types and features that will be accessed. For apps, the app identifier must be provided. This information must be kept up to date. Failure to comply may result in enforcement as further described herein.

Certification Refresh

Smart Home API integrations should be recertified when the API has functionality changed or when your device otherwise adds new capabilities that are supported by the Smart Home API. This is inclusive of additional devices that the partner adds to their integration. For example, as new devices are included, the certification requirement must also be met for those devices.

Additionally, Google reserves the right to require integrations to be recertified periodically. This will ensure you maintain eligibility for the Works with Google Home badge and your integration remains in good standing. Failure to recertify, will revoke your approval for use of the Works with Google Home badge and can potentially lead to one or more enforcement actions against your Smart Home API integration.

3. Matter Integrations

4. Home APIs & Home Hub Runtime Integrations

This section applies to developers integrating with the Home APIs and any related Home hub runtime software of the Google Home Developer Platform (the "Home APIs & Home Hub Runtime").

  1. Relevant APIs under this section include the Commissioning API,Home APIs, Automations API, and any further APIs that may be added from time to time.
  2. The Home hub runtime includes all software required to turn a device into a hub for Google Home.

In the event of any conflict between the Google Home Developer Policies and this section on Home APIs & Home Hub Runtime integrations, the terms of the Home APIs & Home Hub Runtime integrations will control.

Each application integrating with the Home APIs & Home Hub Runtime - whether integrating via Google Play, third party app store, or other means - must comply with these Home APIs & Home Hub Runtime policies, the policies in the Google Play Developer Policy Center, Google'sOAuth API requirements, and API Services User Data Policy, and any other applicable Google requirements.

Device Sharing

Developers who integrate with the Home APIs & Home Home Hub Runtime must also contribute all their devices and signals supported by the Google Home data model to the Google Home Developer Platform. Doing so is a requirement of using the Home APIs & Home Hub Runtime, and certification for Works with Google Home. The following will also apply:

Security, Privacy, and Prohibitions