The Heat Pump Has a Landlord: A UK Homeowner’s Guide to Local Control

You buy a heat pump, a home battery or a solar inverter. You expect a box on the wall, a thermostat, maybe a slightly smug feeling about your carbon footprint. What you often get is an email verification screen. Then an installer code. Then a vendor portal with a password policy written by someone who hates you.

The greenest appliance in the house has a login screen. And in the UK, where the Boiler Upgrade Scheme and a patchwork of installer incentives have pushed more low-carbon hardware into ordinary homes, that login screen is becoming the real ownership interface. The hardware is yours. The visibility is rented.

That is not a reason to reject the kit. Heat pumps and batteries are useful, boringly sensible machines. But the app layer around them deserves the same scrutiny as the installer quote, the warranty and the commissioning certificate. If you cannot read your own home’s data without asking a server in another country, you do not fully own the system.

The login screen is the new meter box

A modern heat pump is a data-rich device. It knows flow temperatures, compressor cycles, outdoor conditions, hot water demand and fault codes. A battery knows state of charge, import and export, and whether the tariff is doing something silly. This data is genuinely useful. It can spot a badly configured system, prove a warranty claim or help you shift usage away from peak rates.

The problem is where it lives. Too often, it sits behind an installer-locked account. The installer who commissioned the system holds the admin login. The homeowner gets a limited view, or a separate app that depends on the same vendor cloud. If the installer retires, switches brands or goes bust, the paperwork may survive but the account may not.

Remote diagnostics are not the enemy. A manufacturer being able to see a fault code before sending an engineer is good service. A cloud dashboard that updates every few minutes is convenient. But convenience has quietly become a condition of use. The cloud should be an accessory, not the front door.

What you actually own

When you buy a heat pump or battery, you own the physical hardware. You probably own the warranty terms attached to it, subject to servicing conditions. You may not own the account, the data schema, the local API or the right to move your history to another platform.

That matters because the lifespan of the hardware is longer than the average app. A well-installed heat pump should run for 15 years or more. A cloud service can disappear in a funding round. A vendor can change its terms, retire an app or move features behind a subscription. An installer can vanish between annual services.

So the practical question is not ‘does it have an app?’ Almost everything does. The question is: what still works when the app is gone?

A practical ownership checklist

Use this before you sign the quote, and again at handover.

• Ask for local control in writing. Does the system expose a local API, Modbus, MQTT or a local web interface? Is it documented? Can you read data without a vendor account? A read-only local endpoint is a reasonable ask, not a hacker fantasy.
• Check data export. Can you download your history as CSV or JSON without raising a support ticket? If the answer is no, ask why. Your home’s energy data should not be held hostage.
• Put the account in your name. The primary account should use your email, not the installer’s. Ask how ownership transfers if you move house. A future buyer should inherit a working system, not a mystery login.
• Test offline behaviour. Turn off the internet for an hour. Do schedules survive? Does the thermostat still work? Can you see current temperatures? If the house stops making sense without Wi-Fi, you have bought a cloud service with a compressor attached.
• Ask about firmware and security. Who pushes updates? How often? Is there a security contact? Will the device keep working if you decline an update? These are normal questions for a connected device, even a boring one.
• Confirm installer independence. Can another MCS-certified engineer service the system? Are diagnostics available to them, or is everything locked to the original firm? Warranty terms should not trap you with one company.
• Keep a handover pack. Model numbers, serial numbers, wiring diagram, commissioning settings, installer details, account recovery information. A PDF in your email is not glamorous, but it is more durable than an app store listing.
• Separate the kit on your network. Put heat pumps, batteries and inverters on a guest or IoT Wi-Fi network where possible. It is not a full security strategy, but it limits the blast radius of a cheap cloud module.

The design critique: build for the building

For product teams, the lesson is simple: local-first is not a niche feature. It is a trust feature. A heat pump app should work on the home network for the basics — current status, schedules, temperatures, fault codes — and use the cloud for the extras: remote access, diagnostics, fleet learning, installer support.

That means shipping a documented local interface, even a modest one. It means readable data, not just a traffic-light dashboard. It means export that produces a file a human can open. It means account handover as a designed flow, not a support case. And it means an exit plan: what happens to the data and the controls if the company changes direction?

None of this is glamorous. It will not make a launch keynote. But it is the difference between a low-carbon home that can be maintained by its owner and one that depends on a vendor’s continued enthusiasm for a small cloud bill.

The awkward bit: remote support is good

This is not an argument against connected appliances. Remote monitoring can catch efficiency problems, reduce callouts and help engineers arrive with the right part. A well-run cloud can be genuinely useful. The point is that it should sit alongside local control, not replace it.

Britain’s housing stock is old, varied and awkward. Heat pumps need careful commissioning. Batteries need sensible tariffs. The people living with this kit need to see what it is doing. A login screen is not a relationship. A readable local system is.

So ask the boring questions before the shiny ones. The green transition will not be won by apps. It will be won by homes that can still run when the app is gone.