The wrench work may be finished, but a service visit is not fully closed until you know who can still reach the equipment through an app, web portal or installer account.
That matters because connected controls create another path into equipment that used to answer only to switches, relays and local thermostats. ACHR News reports that a cyberattack targeting French supermarket refrigeration systems caused food losses and disruptions. The incident involved commercial refrigeration, not residential HVAC. Still, the practical lesson travels well: remote control is useful, but every remote connection needs an identifiable owner and a clean handoff.
You do not need to treat every technician like a threat. You do need to distinguish temporary service access from permanent control of your house.
Start with the thermostat account
Open the thermostat app while the service call is still fresh. Find the household members, invited users, contractors, dealers or professionals listed in the account. Product terminology varies, so inspect every menu related to sharing, permissions and remote support.
Record the account owner and recovery email. The owner should be someone in the household, not an installer, previous homeowner or email address nobody checks. Confirm that the recovery phone number is current and that you can sign in without relying on the contractor.
If a technician received an invitation for diagnostics, ask whether that access is still required. Remove it when the job is complete unless you knowingly want ongoing monitoring. If access must remain, write down who has it, what it permits and when you will review it.
Check more than the wall control
A smart thermostat may be only one connected component. Make a short inventory of any equipment that can communicate beyond the mechanical room: zoning panels, indoor air quality monitors, leak sensors, water heaters, boilers, heat pumps, gateways and energy-management devices.
For each item, record the manufacturer, model, app name and account owner. Then answer four questions:
Can the device change operation remotely? Can it send alerts? Does the contractor have a separate portal? Does the system still work locally if the internet or cloud service is unavailable?
This is a documentation exercise, not an invitation to open electrical compartments or defeat safety controls. Use labels, manuals, app screens and the contractor’s invoice. Photograph the model information only where it is visible without removing panels.
Change shared credentials
If you gave a technician your household password, change it. Do the same if a password was spoken aloud, written on a work order or reused across multiple home devices. Give every adult user an individual login when the platform supports it.
Turn on multifactor authentication if available. Save recovery codes somewhere separate from the phone running the app. Also confirm that alerts reach an address you monitor. A perfectly configured warning is useless when it lands in a former owner’s inbox.
Do not factory-reset equipment casually. A reset can erase schedules, equipment settings or commissioning information. If ownership cannot be transferred cleanly, ask the manufacturer or installing contractor for the documented transfer procedure.
Put digital access on the invoice checklist
Before approving the final handoff, ask the contractor:
Which devices did you connect to? Did you create or use an installer account? Does your company retain remote access? What can that access change? How do I revoke it? Will revoking it affect diagnostics, maintenance agreements or warranty support?
Write the answers beside the equipment record. If you have a service agreement or coverage for home systems and appliances, keep its contact and claim information there too. Coverage does not replace access control, but both records belong in the same household file.
Finally, test the local controls. Change the setpoint at the thermostat, confirm the displayed mode and verify that another household member can operate the system without your phone. You are checking the handoff, not diagnosing the refrigeration circuit or rewriting installer settings.
A connected HVAC system should finish a service visit with fewer unknowns. The physical repair gets the equipment running. The digital closeout makes clear who can keep touching it after the truck leaves.