Meridian Consent Privacy Notice — Alexa Account Linking
This Consent Privacy Notice describes what you authorize when you link Meridian to Amazon Alexa so Echo devices can control Meridian lights and switches, and how ncdLabs ("we," "us," or "our") collects, uses, stores, and shares that information.
Meridian is a local-first operations platform. Voice control uses a free ncdLabs Alexa
proxy service (alexa.ncdlabs.com) that is separate from Meridian Hub. Device
actions run on your Meridian app while it is open and connected.
Part I — Consent
1. What you are authorizing
When you enable the Meridian Alexa Smart Home skill and complete account linking, you allow Amazon Alexa to send discovery and control requests to ncdLabs' Meridian Alexa service, which forwards them to your linked Meridian home session. You authorize:
- Discovery of Meridian light and switch resources you choose to expose
- On/off control of those resources via Alexa voice or the Alexa app
- Storage of a home identifier, short-lived link codes, and OAuth tokens needed for account linking
Meridian does not receive your Amazon password. Authentication with Amazon is handled by Alexa account linking. Meridian does not use this data for advertising, sale to third parties, or profiling.
2. Your choices
- Cancel during Alexa skill enablement if you do not want to link.
- Disconnect later in Meridian: Settings → Plugins → Amazon Alexa → Disconnect.
- Disable the skill in the Alexa app or revoke access in your Amazon account settings.
- Delete local data by removing Meridian's application data from your device or using Meridian's data export/purge options where available.
3. Agreement
By linking Meridian to Alexa, you authorize ncdLabs to process account-linking and device control messages solely to provide Alexa voice control of your Meridian lights and switches. You confirm that you have read and understand this Consent Privacy Notice.
Part II — Privacy Notice
4. Scope
This notice applies to Meridian's Alexa Smart Home skill account linking and the free Meridian Alexa proxy service. It is the Consent Privacy Notice URL used for Alexa skill certification and account linking.
5. Information we process
From Meridian (your app)
- Home identifier and optional home label
- Short-lived link codes you enter on the Alexa account-linking page
- Resource identifiers, friendly names, and capability flags for exposed lights/switches
- Outbound WebSocket session while Meridian is open (to receive control directives)
From Amazon Alexa
- OAuth authorization codes and access/refresh tokens issued for account linking
- Smart Home directives (discover, turn on/off) and correlation identifiers
- Alexa user association needed to route directives to your linked home
We do not receive your Amazon password. We do not request Login with Amazon profile scopes for this skill path.
6. How we use your information
- Complete Alexa account linking
- Discover and present Meridian endpoints to Alexa
- Forward voice/app control directives to your Meridian app session
- Show link status and troubleshooting information in Meridian
- Operate and secure the alexa.ncdlabs.com service (logs, abuse prevention)
7. Where information is stored
-
On your device: Meridian stores the Alexa home link locally
(for example
alexa-link.jsonunder Meridian application support). - On alexa.ncdlabs.com (ncdLabs free proxy): home records, OAuth tokens, endpoint catalog for discovery, and short-lived link/authorization codes. This service is separate from Meridian Hub and is not billed as Hub.
Voice control requires your Meridian app (or a future always-on agent) to maintain an outbound connection. If Meridian is closed, Alexa may report devices as unreachable.
8. How information is shared
| Recipient | What is shared | Why |
|---|---|---|
| Amazon Alexa | Account-linking responses, discovery payloads, directive responses | To enable and operate Smart Home voice control |
| Your Meridian app | Control actions for linked resources | To execute on/off commands on your devices |
| ncdLabs infrastructure | Operational logs for the Alexa proxy | Reliability and security of alexa.ncdlabs.com |
We do not sell your personal information. We do not share this data with data brokers.
9. Data retention
- Link codes expire quickly (minutes) and are cleared after use.
- OAuth tokens and endpoint catalogs remain until you disconnect in Meridian or disable the skill.
- Disconnecting in Meridian removes the local link and stops the outbound relay; disable the skill in Alexa to stop new directives.
10. Your rights
Depending on where you live, you may have rights to access, correct, or delete personal information. Disconnect in Meridian and disable the Alexa skill to stop processing. For questions, contact us using Section 14.
11. Security
- Account linking and skill traffic use HTTPS.
- Home relay uses an outbound WebSocket from your app to alexa.ncdlabs.com.
- Lambda (when used) forwards skill payloads to alexa.ncdlabs.com with a shared secret header.
You are responsible for securing the device where Meridian runs.
12. Children's privacy
Meridian and Alexa linking are not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children through this feature.
13. Third-party services
Alexa services are provided by Amazon.com, Inc. and its affiliates. Your use of Amazon services is also governed by Amazon's policies, including the Amazon Privacy Notice and Conditions of Use.
14. Contact us
ncdLabs
Email: privacy@ncdlabs.com
15. Changes to this notice
We may update this Consent Privacy Notice from time to time. When we do, we will revise the "Last updated" date at the top of this document. Material changes will be reflected in the hosted version used for Amazon's Consent Privacy Notice URL.