HearthPilot
One app for the premium specialty gear that nothing else handles — and an AI brain that cannot read your credentials, even if subpoenaed.
Vestaboard, Lutron, Navien, Schluter, Flair, Rachio, Airthings, RTI, WattBox — controlled together by an LLM that runs in confidential-compute enclaves we cannot see into.
What it does
Plain-English scenes that touch every brand in the house. An iPhone-native surface that doesn't feel like a utility app. Real screens from TestFlight b59 — the kind of detail you can't fake with mockups.
9 brands shipping 132 devices live 12 dashboards 0 telemetry
Every system at a glance. Scenes, lights on, indoor temp, device count, mode grid.
Scenes the brain understands. Run them, schedule them, ask for new ones in plain English.
Pressure, temperature, leaks, water heaters, pool chemistry — five vendors, one view.
Per-circuit consumption, monthly trends, category breakdowns. Live from your panel.
Hikvision, DoorBird, Luma — every camera, every PTZ, in one grid. Tap once.
Seven more dashboards not shown here: Climate · Network · Pets · Audio · Activity · Rooms · Settings. Every adapter you have, in the tab your hand reaches for.
The pitch
You spent twenty years assembling the home of your life. Lutron in the walls, hydronic floors in the slab, a Navien cascade in the mechanical room, a Vestaboard in the foyer, a Pentair on the pool, a SPAN behind the meter. Twenty manufacturer apps, each convinced it's the center of the universe. None of them talk. HomeKit ignores the half you care about.
You don't want to become a Home Assistant sysadmin. You don't want a Crestron programmer's phone number. You want the gear you already paid for to act like one house.
What it pilots
Three layers, most-recognized to most-niche. Fifty-plus brands are integrated today — the green dot marks the ones already running.
Already running.
Why HearthPilot
01
We ship LAN-native integrations for Lutron LEAP, Navien NaviLink, Schluter Ditra-Heat, RTI XP processors, WattBox UPS systems, and the long tail of installer-class hardware HomeKit and Matter ignore. Fifty-plus are built today — over two dozen already running — and new ones land every week.
50+ integrations · 27 running today
02
Scenes you can describe in a sentence — "movie night," "we're leaving" — execute deterministically and adapt over time. Schedules learn from presence and weather. Ask in plain English; the brain plans the steps. All of it grounded in your actual device graph, not generic templates.
Confidential-compute enclaves · plain-English intent
03
We've engineered the system so we can't read your credentials or home state — even if subpoenaed. Per-household keys derived in your iPhone's Secure Enclave, AWS Nitro enclaves with public binary hashes, your device verifies before releasing ciphertext. Same pattern as Apple's Private Compute Cloud, on infrastructure we control.
Zero staff access · Sigstore-published enclave hashes
Privacy by architecture
Most smart-home companies see everything. Every Lutron press, every Sonos play, every motion sensor trip, every door unlock, every word your voice assistant heard. We don't, and we've engineered the system so we can't — even if our servers are seized.
Your credentials and home state are encrypted with a per-household key derived from Sign in with Apple plus a passkey held in your iPhone's Secure Enclave. The HearthPilot Brain runs inside AWS Nitro confidential-compute enclaves that publish their binary hashes to a public transparency log; your device verifies what's running before it releases ciphertext. We don't have the keys. Our employees don't have the keys. A subpoena to us produces ciphertext.
This is the same architectural pattern Apple ships as Private Compute Cloud for Apple Intelligence. We implement it on AWS so we control the full stack.
How it ships
App
Free forever
Beautiful Apple-native control. HomeKit + Matter + curated cloud APIs. iPhone, iPad, Mac, Apple TV, Watch.
Brain
$19/mo or $190/yr
The premium-gear engine. 24/7 LLM intent. Schedules that learn. Custom integration requests. Runs in confidential enclaves.
Bridge
~$199 one-time
Light-duty ethernet appliance. LAN-protocol native. Holds primary key custody. Safety-critical automations stay online when your internet doesn't.
Brain Local
$499 one-time
Software unlock to run the full Brain on your own Mac mini M4 Pro, Mac Studio, or AMD AI Max+ host. Air-gap capable. The privacy maximalist's path.
Who builds it
HearthPilot is built by Jonathan Schalliol, a venture investor who got tired of his own twenty-app home running like ten disconnected houses. The first integrations on the platform are the ones in his own walls.
Schalliol Automation, LLC is independent. No platform vendor, no installer, no integrator owns any equity. The business model is a subscription, not a data sale.
Waitlist
Join the waitlist to be among the first 5–10 households at TestFlight (August 2026). No spam. One launch announcement, plus occasional architecture decisions worth sharing.
Reads as: an email to hello@hearthpilot.com. Loops form coming when the launch list goes public.
