The Connected-Device Handoff at Home Sale SOP

Purpose

When a house sells, its connected devices do not know. The seller keeps receiving the new family's leak alerts and door-lock activity, the buyer inherits a thermostat they cannot control and a camera recording into a stranger's account, and the shop still holds dealer access to a home whose owner it has never met. This procedure guarantees that at a sale every shop-installed device leaves the seller's account and the shop's access, any personal data on the device is cleared, every device is left working locally, and the buyer finds instructions to take ownership, all without the shop ever deciding on its own who owns what.

Scope

Covers: shop-installed or shop-serviced devices tied to an app account (thermostats, water shutoffs and leak sensors, locks, cameras and doorbells, openers, generator and pool controllers) at a residential sale, when the seller or their agent asks the shop to help.

Does not cover: devices the shop never installed or serviced (listed for the seller, not touched); setting up the buyer's accounts, which is a new commissioning under The Connected-Device Commissioning SOP; rental tenant turnovers, where the property owner keeps the accounts and only shared users change; deciding whether a device conveys with the house, which is settled by the purchase contract and the parties' agents, not the shop.

Roles and responsibilities

Procedure

1. Confirm the request comes from the account owner. The office checks that the person asking matches the account owner on the shop's equipment record, by a callback to the number on file, not the number the request came from. Acceptance: requester matches the record, or holds the record owner's written authorization (a listing agent with the seller's email, an executor with the documents the shop's policy names). Wrong looks like: the buyer, the buyer's agent or a new occupant asking the shop to remove the seller or take control. Stop rule: no changes and no visit until the owner confirms; tell a buyer plainly that only the current owner can release the devices. Hazard: no physical hazard; the risk is handing control of a home's locks and cameras to someone unverified, which the callback exists to prevent.

2. Inventory every connected device against the record. Walk the house with the record in hand, including garage, attic, basement and exterior. Acceptance: every device on the record is found, and for each you note account owner, shared users and whether the shop has dealer access. Wrong looks like: a record device missing, or a connected device the shop never installed. Stop rule: a device not on the record is listed for the seller with a plain description and its location and left alone; a missing record device is noted as missing. Hazard: attic and crawl entries: stand on joists or boards, and do not enter a crawlspace where water touches electrical equipment until that circuit is off.

3. Get the seller's written list of what stays. Ask the seller to confirm, in writing (an email to the office is enough), which devices stay with the house and which they are taking. Acceptance: a written list covering every device from step 2. Wrong looks like: "whatever the contract says", or a seller planning to remove a hardwired lock or shutoff valve. Stop rule: where the seller is unsure or the buyer disputes it, pause that device and refer both to their agents; whether an attached device is a fixture that conveys depends on the purchase contract and state law, and the shop does not decide it. Hazard: if a stays-list device is to be removed instead, removing a shutoff valve or a hardwired lock is a separate repair job with its own isolation steps, not part of this visit.

4. Seller removes each staying device from their account, then you prove it still works locally. The seller does this in their own app, or uses the manufacturer's transfer feature to the buyer's email where it exists. Removal often factory-resets the device. Acceptance: the device no longer appears in the seller's app (or a transfer is pending), and its local function works: thermostat in heat or cool mode at a setpoint the seller agrees, valve open with water flowing at a fixture, lock locking and unlocking by keypad or key, opener cycling from its wall button. Wrong looks like: a device that came back from reset off, closed, unlocked or in a setup screen. Stop rule: restore local operation before leaving; if it will not restore, do not leave the house in that state, call the office for a same-day repair. Hazard: in freezing weather a reset thermostat left off can freeze a vacant house within a day; a reset valve may close and leave the house without water; a reset lock may drop all codes, so confirm a physical key works before resetting any lock.

5. Remove the shop's dealer access. From the shop's professional portal, remove each device from the shop's access. Acceptance: the portal no longer lists any device at this address. Wrong looks like: a device still listed, or the shop's access surviving the seller's removal. Stop rule: if the portal will not release it, contact the manufacturer's dealer line the same day and record the ticket. Hazard: none physical; leftover access is the shop seeing a stranger's home, and the record shows when it ended.

6. Clear personal data the app removal leaves behind. Cameras and doorbells may hold local recordings; locks hold user codes and history; some controllers keep schedules and names. Factory-reset these per the manufacturer's procedure with the seller's approval. Acceptance: device at factory state, with its local function re-proved as in step 4. Wrong looks like: recordings still on a local card, the seller's name on a display. Stop rule: where a local card can be removed, hand it to the seller rather than wiping it. Hazard: cameras and doorbells mounted overhead mean a ladder: set it on firm level ground at a 4 to 1 angle with three points of contact (the leaning-ladder angle OSHA sets for employees, in 29 CFR 1926.1053 for construction work and 1910.23 for general industry), and keep the lock's physical key in hand before resetting a lock.

7. Leave the buyer one instruction sheet per device. Put them together in one known place, the kitchen drawer or taped inside the utility closet door, and tell the seller's agent where. Acceptance: each sheet names the device, its location, the manufacturer's setup method, the manual override (valve lever, thermostat buttons, lock key), and the shop's contact; no seller names, emails or codes. Wrong looks like: a sheet with the seller's details, or instructions left only with the seller. Stop rule: if the buyer has already moved in, hand the sheets to them directly. Hazard: show the valve's manual lever in a dry, lit space if the buyer is present.

8. Record the handoff and offer the buyer commissioning. Complete the record below; the office contacts the buyer after closing to offer a commissioning visit in their name. Acceptance: record complete with every device's end state. Wrong looks like: a job closed with dealer access unrecorded. Stop rule: the office does not close the job until steps 4 and 5 show a result per device. Hazard: none physical.

When the sale does not go to plan

• The seller has moved and will not respond. The shop cannot remove a device from an account it does not own. Remove the shop's own dealer access, leave the buyer the instruction sheet and the manufacturer's account-recovery path, and record the attempts.
• The device was registered to the shop years ago. This is the legacy mistake this procedure exists to stop. The shop, as account owner, removes the device with the seller's approval and leaves it ready for the buyer; record it and correct any other device at addresses the shop holds the same way.
• An estate sale. Treat the executor as the account owner's authorized representative once the office has the documents the shop's policy requires.

The record this produces

Per device, on the customer equipment record: device and location; conveys or removed by seller (with the seller's written list attached); seller account removal date or transfer pending to whom; local function proved (mode and setpoint, valve position, lock test); data cleared and how; dealer access removed date; instruction sheet location. The office reads it to offer the buyer a visit; a future technician reads it to know the device's account history; and the shop reads it if a seller later claims they still had access, or a buyer claims the shop could see their home.

A worked pass

A January sale. The seller, an existing customer, emails asking the shop to help before closing; the house will sit empty for nine days.

The thermostat failure is the case this procedure exists for. Had the technician confirmed only that the device left the seller's app, a house with the heat off would have sat empty for nine January days. Step 4's acceptance is about local function, not account status, and that is what caught it.

References

• Manufacturer documentation for account removal, transfer, dealer access and factory reset on each device
• OSHA 29 CFR 1926.1053 (ladders, construction) or 1910.23 (general industry), depending on the work
• See related: Who Owns the App Account on a Connected Device; The Connected-Device Commissioning SOP
• See related: Leaving a Device Record the Next Tech Can Use; Privacy of Cameras and Sensors You Install