Device Profile Sharing Policy
Effective date: May 19, 2026
Version: 1.0
Purpose
The Device Library may allow users to export, publish, or share device profiles for research, troubleshooting, interoperability testing, and defensive security evaluation. Because device profiles can contain identifying or sensitive technical information, this policy explains what may be shared, what must be reviewed first, and what users are responsible for before uploading any profile.
Review Before Sharing
Before sharing a device profile, you must review its contents and remove any information that could identify a person, household, organization, or specific device owner unless you are the owner or have explicit permission to disclose it. You are solely responsible for ensuring that any profile you share is lawful, authorized, and appropriate to disclose.
Examples of Sensitive Information
Device profiles may contain sensitive or identifying information, including:
- Static Bluetooth addresses or other persistent device identifiers
- Device names that include a person’s name, username, address, or company name
- Serial numbers, model-specific identifiers, inventory tags, or asset labels
- Manufacturer data, custom payloads, or metadata that could reveal ownership or deployment context
If this information is not necessary for reproducibility or defensive analysis, it should be removed, generalized, or redacted before sharing.
Share the Minimum Necessary
Only share the minimum information needed to reproduce your evaluation, explain a finding, or support defensive testing. Good-faith security research should avoid unnecessary disclosure of nonpublic data, minimize privacy impact, and stop short of exposing information that is not required to document the issue or behavior.
Authorization and Ownership
You may only share device profiles for devices that you own or for which you have explicit permission from the owner to test and disclose technical details. Do not upload profiles derived from third-party devices, customer environments, workplace assets, or public spaces unless you are clearly authorized to do so.
Public Sharing Warning
Any profile shared to a public or community Device Library may be copied, indexed, downloaded, or redistributed by others. Once shared publicly, removal may not fully eliminate prior copies. Do not share any profile unless you are comfortable with the possibility that its contents may become broadly accessible.
Recommended Redaction Practices
Before sharing, we strongly recommend that you:
- Replace personal names with neutral labels such as
Owner DeviceorTest Device - Mask static addresses, serial numbers, and asset identifiers where possible
- Share only the fields necessary to reproduce the relevant BLE behavior
No Warranty and User Responsibility
The app may provide tools that make sharing easier, but it cannot determine whether every field is sensitive in your specific context. You remain fully responsible for reviewing, redacting, and authorizing any content you choose to upload or distribute.
Contact: [email protected]