Security and trust
Homie is built by Homie Labs Oy, a company based in Helsinki, Finland. This page answers the questions security, IT and procurement teams ask most often. For anything not covered here, email hello@usehomie.com.
Is Homie SOC 2 certified?
Yes. Homie is SOC 2 Type I certified, with compliance monitored through Vanta. Contact hello@usehomie.com to request the report or a completed security questionnaire.
Homie also follows the EU General Data Protection Regulation (GDPR) and has appointed a Data Protection Officer. When your team uses Homie, your company is the data controller and Homie processes the data on your behalf.
What LinkedIn access does Homie need?
Homie does not use a LinkedIn password, LinkedIn login or LinkedIn API permissions. Each person installs the Homie Chrome extension, which syncs their network from the LinkedIn session they are already signed into in that browser.
The extension reads:
- your own LinkedIn profile, so Homie knows who you are
- your first-degree connections list
- second-degree people, found through LinkedIn search, so Homie can map who your connections know
The extension does not read your LinkedIn messages or inbox. It never posts, likes, comments, sends connection requests or sends messages. When you choose to draft an intro request, the extension can open a LinkedIn message with the draft filled in, and you decide whether to send it.
What Google access does Homie need?
Connecting Google is optional. If you connect it, Homie asks for two read-only permissions:
- Gmail metadata: sender, recipients and dates. Homie cannot read email subjects, bodies or attachments.
- Google Calendar events (read-only): attendees and dates, used to measure how often you meet someone.
Homie never sends email or creates calendar events from your Google account.
What data does Homie store about our employees and their connections?
For each person on your team: their name, work email, role, company and LinkedIn profile, plus the connections synced from their network.
For each connection: public profile details such as name, role, company and work history, and the relationship signals Homie uses to calculate a Warmth Score, such as shared employers, shared schools and direct engagement.
If Google is connected, per contact: their email address and display name, how many emails and meetings you have exchanged, and when you were last in contact. Per email or meeting: a timestamp and its identifier, so repeat syncs don't double count.
Homie does not store email subjects, bodies or attachments, calendar event titles, descriptions or notes, or LinkedIn messages. See the privacy policy for the full details.
Who can see our network data?
Your network data is only used within your own Homie organization. Homie staff do not read your Gmail or Calendar data. Processing is automated, and staff access it only with your explicit permission, where strictly necessary for security or legal compliance, or in anonymised aggregate form.
What happens to our data if we cancel?
Cancelling your subscription stops delivery and paid features. It does not delete your data on its own, so you can come back without syncing again.
To delete your data, open Settings, then Personal, and choose Request data deletion, or email hello@usehomie.com. We delete your account, the connections synced from your network and every email and meeting record derived from your Google account, then confirm by email. When the last member of an organization is deleted, the organization is deleted too.
You can disconnect Google at any time in Homie. That immediately deletes the stored Google credentials and every email and meeting record derived from your account, and recalculates affected scores without them.
Where is data processed?
Homie Labs Oy is an EU company. The Homie web application runs in Frankfurt, Germany. When a service provider outside the EU/EEA is used, transfers rely on the EU-US Data Privacy Framework or standard contractual clauses, as described in the privacy policy.
How is data protected?
- Google and CRM connections use OAuth. You approve access on the provider's own login screen, and Homie never sees or stores those passwords.
- Access to the API and MCP requires authorization, scoped to your organization.
What support do we get if something breaks or stops syncing?
Every customer gets a dedicated contact on the Homie team, on any plan. Reach them in Slack or at hello@usehomie.com. A real person reads every message and replies within one business day.