Desktop and Mobile Apps
Meridian is free on every device and keeps its application data there. Shipping builds (macOS DMG, Mac App Store, Windows, Linux, iOS, and Android) are client-only — they do not embed a hub daemon.
Meridian runs on hardware you control and keeps its own configuration and synchronized smart-home data there. Third-party integrations still follow the rules of the services they connect to.
Meridian is free on every device and keeps its application data there. Shipping builds (macOS DMG, Mac App Store, Windows, Linux, iOS, and Android) are client-only — they do not embed a hub daemon.
Optional paid Meridian Hub ($15/month) is an ncdLabs-hosted always-on service for 24/7 monitoring and alerts, detailed reporting, and join/leave device alerts. In Connected mode the app syncs with that hosted Hub. There is no customer self-hosted Hub product.
Standalone keeps observation and control on the device using local adapters and cached data; it does not require Hub.
Connected (Meridian Hub) stores account identity, provider configuration, resources, events, and related sync data on ncdLabs-hosted Hub infrastructure for your subscription, and mirrors a working copy in the app’s local database for that signed-in user.
Account credentials (password or PIN hashes, session unlock, Hub pairing tokens) stay in the device secure store (Keychain / equivalent). Passwords are never sent to Meridian as account passwords — Meridian Hub uses email identity plus a pairing bearer for Connected access.
You can delete your Meridian account from the app: Settings → Account → Delete account, or from the profile menu. You must type your account email to confirm.
Deletion removes the account from this device (registry entry, secrets, and that user’s local database). In Connected mode with Meridian Hub, Meridian also deletes the matching Hub tenant data for that subscription account. After deletion you return to sign-in or create-account.
Deleting a Meridian account does not revoke third-party provider access by itself — disconnect providers in Meridian and revoke access in each provider’s account settings when needed.
Optional platform passkeys unlock your Meridian account on this device. Credentials stay in the device secure store and are removed when you delete that Meridian account on the device. Production relying-party host is passkeys.ncdlabs.com (Apple Associated Domains; Android Digital Asset Links when Play builds ship).
When a Meridian release is built with a Sentry DSN configured, the app may send crash and error diagnostics (and related technical context) to Sentry to help improve reliability. Builds without a DSN do not initialize Sentry and do not send that telemetry. Diagnostics are separate from your smart-home configuration and device state stored locally or on your runtime.
To show and control connected equipment, Meridian may synchronize information such as provider account identifiers, device names, device identifiers, capabilities, state, rooms, locations, events, and alerts. The exact information depends on the provider and permissions you approve.
When a provider uses its own sign-in and consent page, authentication is handled by that provider. Meridian receives the tokens or connection information needed to maintain the link; it does not receive the password entered on the provider’s site.
For the exact Amazon permissions, storage details, revocation steps, and data categories, read the Amazon connection privacy notice.
The Meridian marketing pages use Google Analytics to measure page visits, screenshot opens, and download clicks. These website analytics do not include the smart-home configuration or device data stored by the Meridian app.
This page explains the current product at a high level; provider-specific notices supply additional detail. For a privacy question or correction, email privacy@ncdlabs.com.