Sensing needs visible notice

What it is

The guest's remedy starts with knowing: entering a sensing field must itself be visible and intelligible to the person entering. An effective privacy notice does not live in the owner's app — guests install no apps and read no terms — but on the channels guests actually cross: the threshold, the room, the host's own words. Notice design answers: in what form, placed where, and stated to what depth can a passing person actually learn "there is collection here, and of what".

Why it happens

The legalistic notice uses the wrong channel: the policy link lives in the account holder's app, which a bystander never opens — undelivered notice is no notice. Effective notice must ride the channels the guest really crosses: the physical threshold (visible before the point of crossing), spatial cues (continually perceivable while present), and the host's words (the social channel, with the highest credibility).

Effectiveness has three independent conditions. Timing — while choice still exists, before crossing the threshold, not after settling into the sofa. Comprehensibility — an icon and one sentence readable in passing, not a paragraph. Honesty — matching what is actually collected; a notice saying "we may collect everything" is no notice, and it trains everyone to ignore all notices.

The social channel is the most effective and the most awkward: asking a host to say "there's a camera in the living room, I've switched it off" costs social effort. What design can do is make the state simple enough that the sentence is simple — when guest mode switches everything off, the host only has to say "it's all off" instead of explaining device by device. The difficulty of notice is proportional to the system's complexity; simplifying the system is simplifying the notice.

Studying it

• Privacy notice research (described generically): the privacy-HCI literature on notice forms — layered notices, icons, timing — converges on one conclusion: effectiveness depends on timing and brevity; the closer to the decision point and the shorter, the better, and reading rates for long policies approach zero. These principles carry over to in-space notice, though the "guest" audience is absent from most of that literature.
• Guest exit studies (described generically): surveys of smart-home guests show large gaps, in both directions, between what departing guests recall having been collected and the actual inventory — the recall error is itself the measure of notice failure.
• Variables: notice recall (measured after leaving), direction of deviation between recall and actual collection, effect of notice on willingness to return, proportion of hosts who actually give the notice.

Where it stops holding

• The conflict between visibility and domestic aesthetics is real: hosts want devices hidden (admitting to home surveillance carries a social cost), while notice demands exposure. The tension cannot be argued away, only acknowledged — the cost of notice is borne by the host; the cost of no notice is borne by the guest; the product's job is to make that balance explicit, not decide it for one side.
• The achievable standard in homes is often disclosure rather than consent: "this is recording" plus no alternative equals being informed, not authorising. Having given notice does not establish legitimacy; legitimacy has to come from reining in the collection itself.
• Do not spend notice on trivial sensing: posting signs over a corridor motion light trains "signs are background noise"; notice density must match the sensitivity of the collection.

Applying it

• Place notice at the decision point: the camera placard at the door visible before ringing; rooms with interior sensing carry passingly identifiable cues (icon plus short phrase), not text hidden on the back of the device.
• Use the host channel: enabling guest mode generates the one-sentence script ("the cameras are paused") — reducing the system state to something the host can say in passing.
• Three items, one sentence: what is collected, where it is kept and for how long, how to request deletion. Anything beyond these three does not fit passing notice.
• How to check: exit interviews — guests recall "what was collected", compared against the actual inventory; deviations in both directions (believed collected but wasn't; collected but unknown) both count as failures. Then track how often hosts actually speak the notice — a notice design hosts do not execute equals zero.

Related

• Same group: Z6.04.1 Guests enter the sensing field without ever consenting · Z6.04.3 Children and visitors need minimal collection by default
• Nearby: Z6.08 Physical indication of collection state · Z8.03 Notice of public sensing and surveillance
• Search terms: privacy notice · signage · bystander · layered notice