“transmitted only to you” doorbell is streaming to the cloud

The video doesn't seem to show any evidence of streaming to the cloud, only thumbnails which the cloud service is fetching from the HomeBase?

EDIT: to verify this, I also turned off my HomeBase, then logged in to https://mysecurity.eufylife.com for the first time.

It does say there are no videos available or event data, but: there is a thumbnail of my camera view about 6 hours ago. This means the images are not fetched just-in-time, but were uploaded without my permission. Judging by the URL, they are uploaded daily, at a minimum.

I've never signed up for any kind of cloud storage, or used the web interface before, so this upload must have been happening quietly for the past few years. This is totally unacceptable, even though access seems to be restricted to my own user. The images are not encrypted and will be accessible to any of their employees with S3 permissions.

Is there a thumbnail already stored for every other video I have? I think I'd rather not log in to find out...

This seems pretty outrageous but reading their website they state:

eufy records and stores videos locally when motion is detected by your device. If you subscribe to our cloud storage service, your videos are securely stored in the cloud and can be deleted at any time. Your videos will be permanently deleted from our servers according to the storage period on your plan.

so it sounds like it's working as intended with their privacy guarantees to do with your data stored in the cloud and ensuring it's only accessible by you

Although the part about identifying faces does sound pretty Orwellian

The privacy commitment:

https://us.eufy.com/pages/privacy-commitment?_pos=1&_sid=d60...