@ChrisV That’s a good question. That depends more on Athom I guess.
I password protected My Homey app on my phone to prevent this.
Some background info on the app:
The app only retrieves data from your NAS.
The only 3 things it can do:
- upload files via FTP (but you have to enable it in the app settings)
- shut down
- restart
So no critical data is shared with Homey. Next to that the password is encrypted in the app. Without the key you can’t decrypt it