SkimGuard

SkimGuard Security Monitoring — Device Privacy Notice

Effective: October 7, 2026

This notice explains how SkimGuard, Inc. ("SkimGuard," "we," or "us") handles wireless signal data collected by our security monitoring systems at business locations. It is separate from the privacy policy for the SkimGuard mobile apps, which is available at skimguard.io/privacy.

1. Scope

SkimGuard operates security monitoring devices, desktop software, and integrations with business Wi-Fi network equipment (Cisco, Meraki, Aruba, Ruckus and Juniper Mist), all deployed at the locations of our business clients. We call these, together, "SkimGuard Security Sensors." They run continuously to help detect payment-terminal tampering, unauthorized hardware attachments, and electronic card skimmers.

2. What we collect

SkimGuard Security Sensors receive the wireless signals that Bluetooth devices broadcast publicly within range of a protected location. For each device observed, we may record:

  • a hashed identifier derived from the device's Bluetooth address (MAC address);
  • the manufacturer prefix of that address, when it is a fixed address assigned by the manufacturer;
  • the wireless protocol (for example, Bluetooth Low Energy or Bluetooth Classic) and the signal strength;
  • which sensor observed the device, where that sensor is located, and when the observation was made;
  • information the device itself broadcasts publicly, such as its advertised name, manufacturer data, and advertised service types.

How identifiers are handled. A device's Bluetooth address is converted to a hashed identifier on the sensor itself, or as soon as we receive it in the case of network integrations. We do not store the original Bluetooth address. A hashed identifier is not anonymous: the same device always produces the same hashed identifier, and it can be matched to a known address. We therefore treat hashed identifiers as personal information and protect them accordingly. Identifiers belonging to SkimGuard's own sensors are stored as-is, so that our sensors do not flag one another.

What we do not do. Our sensors do not connect to, pair with, or access the contents of any nearby personal device. They detect nearby devices using standard Bluetooth scanning, which may send brief discovery requests that nearby Bluetooth devices can receive. Our sensors do not capture Wi-Fi traffic or Wi-Fi probe requests.

3. Why we use it

We use this data for security, fraud prevention, and crime prevention. Specifically, we use it to:

  • identify and locate payment skimmers and other unauthorized transmitting hardware;
  • help our business clients and law enforcement agencies investigate tampering and related crimes;
  • support the physical and transaction security of our clients' locations.

We do not sell, rent, or share security signal data for marketing or advertising.

4. Who we share it with

We do not provide original Bluetooth addresses to anyone, because we do not keep them. We do not disclose observation records about bystanders to our business clients in general. We may disclose observation records, identified only by hashed identifier and manufacturer, to the following:

(a) The business client where the sensor is installed. The client can see the devices observed at its own location, shown by manufacturer and a shortened identifier, so that it can verify security events there. The client may also receive exports of its own location's records.

(b) Law enforcement agencies. We provide access to law enforcement agencies that we have verified. Each agency's access is limited to its own jurisdiction, and every access is logged. An agency may also give us a device identifier and ask whether it matches any records we hold. Each requesting agency is responsible for ensuring it has the legal authority its request requires, such as a subpoena, warrant, court order, or other lawful basis.

(c) Service providers that host and operate our systems on our behalf, under confidentiality obligations.

5. Our role

When SkimGuard provides security monitoring to its business clients, including through client-owned equipment and enterprise Wi-Fi integrations, SkimGuard acts as a service provider to those clients.

6. Contact

SkimGuard, Inc.
Questions about this notice: privacy@skimguard.io