LocalTuya Broken on Home Assistant 2026? Here’s Why
For Home Assistant users whose LocalTuya broke in 2026: the three separate bugs behind it, how to tell them apart, and which local-only fix fits yours.
~/archive $ ls -la
Archive
Investigations
-
-
Tuya Air Quality Sensor Fake CO2: What It Really Measures
Tuya's TS0601 air quality sensor reports CO2 without a CO2 sensor. What Zigbee2MQTT's docs and user tests show, and what the device is still good for.
-
Tuya Local Control on a Different Phone: Why It Fails
Tuya local control failing on a new phone is rarely a same-phone rule. What Tuya's docs say, what to check first, and why re-pairing is the wrong fix.
-
SONOFF OpenEdge: What’s Actually Local (and What Isn’t)
SONOFF says OpenEdge needs no app, account or cloud. Checked against SONOFF's own docs: what is verified local today, and what is still only a claim.
-
eWeLink Privacy: What Data Does the App Actually Collect?
A plain-English breakdown of what eWeLink's own privacy policy discloses about device data, permissions, third-party SDKs, and where the data goes.
-
Do Aqara/Xiaomi Devices Stop Working When Discontinued?
Aqara or Xiaomi drops a model. Here's what actually happens to the unit already running on your Zigbee2MQTT or ZHA network, and what really can break it.
-
Zigbee2MQTT permit_join: The Security Risk After 2.0
Zigbee2MQTT 2.0 removed permanent permit_join. What the 254-second join window still exposes, and how a device passlist controls membership locally.
-
Does Tuya Send Your Data to China? What Actually Happens
The 'Tuya sends data to China' claim traces to a 2021 report. Here's what Tuya's own current documentation says about where your data actually goes.
-
Xiaomi’s Official Home Assistant Integration: What ‘Local’ Actually Means
Xiaomi open-sourced ha_xiaomi_home. Here's what its local mode really requires, why most readers outside China won't get it, and what to use instead.
-
Aqara Cloud CVE Chain (June 2026): What It Means for Local-First Users
Aqara's June 2026 cloud CVEs chain into an account-takeover path. Here's how the chain works, who's exposed, and why local Z2M/ZHA setups sit outside it.