A smart thermostat may be listed with the house, but the seller’s account should not be. That distinction matters whenever an HVAC control can be reached through an app, a cloud service, a voice assistant, or a utility program.
The broader risk is no longer theoretical. ACHR News reports that a cyberattack targeting connected supermarket refrigeration systems caused food losses and disruptions in France. The equipment and consequences differ from those in a house, but the practical lesson travels well: network access is part of the mechanical system’s operating environment.
A St. Louis home sale should therefore include a deliberate handoff of connected HVAC controls. This is not a full heating and cooling inspection. It is a narrower job: identify who can control the system, remove access that should not survive closing, and leave the buyer with enough information to operate the equipment locally.
Start at the wall, not in the app
Record the thermostat manufacturer and exact model number. Photograph the display, wall plate, and wiring terminals if the cover can be removed without disturbing conductors. Do not disconnect wires just to document them.
Then test the basic controls from the thermostat itself. Raise and lower the cooling setpoint. Repeat in heating mode when outdoor conditions and equipment instructions allow it. Confirm that the fan can be commanded from the wall control. A buyer should know whether the house remains operable when the internet is down or the manufacturer’s service is unavailable.
If basic operation requires a phone, write that down. Some advanced scheduling, humidity management, zoning, or energy reports may depend on an account even when ordinary temperature control does not.
Map every digital connection
The thermostat app is only one possible control path. Check for links to Alexa, Google Home, Apple Home, home automation hubs, alarm systems, demand response programs, and electric or gas utility accounts. Also look for remote temperature sensors, wireless zone controls, connected humidistats, and equipment gateways mounted near the furnace or air handler.
Make a plain list with four fields: device, account owner, network used, and action required at transfer. Never place passwords, recovery codes, or answers to security questions on that sheet.
Seller access should be removed through the manufacturer’s documented ownership transfer or factory reset procedure. Do not assume deleting the app is enough. The cloud account may still retain authority over the thermostat.
Preserve settings before resetting anything
A factory reset can erase more than Wi-Fi credentials. Before using it, photograph installer settings and note the equipment configuration. Useful entries include heat pump versus conventional heat, number of heating and cooling stages, auxiliary heat settings, fan control, temperature limits, sensor assignments, and any compressor protection delay.
These are not casual preferences. A wrong equipment setting can produce poor operation or unnecessary service calls. If the setup screens are unclear, stop and have an HVAC professional document the configuration before the account is removed.
Also save the current schedule separately. The buyer may not want the seller’s temperature program, but a written copy provides a known starting point and shows whether setbacks were being used.
Give the buyer a local operating packet
Leave the model number, installation guide, user guide, warranty information, and the name of the servicing contractor if those records are available. Include the locations of the furnace or air handler, outdoor unit, filter, condensate shutoff, disconnect, breaker, and any zone panel.
Add one sentence explaining how the system works without internet service. If nobody can confidently answer that question, it is worth resolving before closing day.
The buyer should create a new account with a unique password and multifactor authentication when the platform supports it. The thermostat should join the buyer’s network, not remain on a seller-controlled router or temporary hotspot. After enrollment, test both local and remote commands, then verify that the former owner no longer sees the device.
Know when the handoff needs a technician
Call an HVAC professional when resetting the thermostat could alter equipment configuration, when proprietary zoning is involved, when controls report recurring faults, or when nobody can identify an attached gateway. Professional help also makes sense if the thermostat loses power, heating or cooling fails after transfer, or the system behaves differently from its documented sequence.
Connected controls can make a house easier to operate, but only when ownership is as clear as the wiring. Treat the account transfer like the exchange of keys: document what exists, remove the old access, test the new access, and keep a local way to run the system.