The Question Is Not Whether to Believe You. It Is What Can Be Proven. People who raise this get one of two responses, and both are useless. Either they are waved off, or they are told everything they fear is confirmed. Neither helps anyone build a case. The useful posture is the boring one a lawyer takes with any matter: what happened, what evidence exists, who is the identifiable actor, and what does the law provide. Ava asked attorney Michael Benavides to walk through it that way. Ava Asks, Michael Answers — Evidence and Remedies, Plain English Ava: Someone tells you they think they are being monitored inside their home. Where do you start? Michael, Esq.: I start where I start with a car accident. What did you observe, when, and what is written down. I am not there to diagnose anybody and I am not qualified to. I am there to find out whether there is a legally actionable matter, and that turns entirely on evidence and on identifying a defendant. Ava: Is the underlying technology real? Michael, Esq.: Parts of it plainly are, and we covered that in the previous article. Wi-Fi sensing is a published IEEE standard shipping in consumer hardware that reads motion and respiration through walls. Internet providers retain months of connection records. Device makers hold recordings and telemetry and answer subpoenas. None of that is speculative. So the honest answer is that the general capability exists and is documented. Ava: But? Michael, Esq.: But a capability existing in the world is not proof that a particular person used it against a particular household. That is the gap a case has to close, and it is closed with evidence, not with the existence of the technology. I would be doing someone a disservice if I pretended otherwise. Ava: What kind of evidence actually helps? Michael, Esq.: Records that are contemporaneous, objective, and attributable. A dated log with times and specific descriptions, kept as things happen rather than reconstructed later. Network captures showing what a device on your network is transmitting and to what address. Router and account logs. Billing and service records. Photographs of physical installations. Correspondence — texts, emails, letters — especially anything that shows a person knew something they should not have known. Police reports, even ones that went nowhere, because they establish a timeline. Ava: Network captures — is that something an ordinary person can produce? Michael, Esq.: With help. Traffic can be captured and analyzed to show which devices in a home are communicating, how often, and with which destinations, including foreign ones. That is ordinary digital forensics and it produces exhibits. It is also how you separate a device behaving normally from a device that should not be phoning anywhere. Ava: How do you tell normal from not normal? Michael, Esq.: This matters and it protects people from chasing the wrong thing. Modern networks are noisy by design. Smart devices contact manufacturer servers constantly. Phones connect to dozens of services in the background. A traceroute crossing many hops with timeouts is routine, not evidence of interception. Router lights blink on ordinary traffic. Unknown devices on a network are frequently a neighbor's guest, an old phone, or a printer. If someone builds a case on that kind of material it will not survive, and worse, it obscures anything real that might be there. Ava: So what would be meaningful? Michael, Esq.: An identifiable actor connected to a specific act. A device found in the home that no one in the household purchased. Traffic from a household device to an endpoint that has no business relationship to it. A landlord, employer, or former partner with access, opportunity, and something in writing. That is the shape of a provable case. Ava: If it is a government agency, what applies? Michael, Esq.: The Fourth Amendment, and in California, CalECPA at Penal Code sections 1546 through 1546.4. If a California agency compelled electronic communication information about you — which the statute defines to include an IP address — it generally needed a warrant, your consent, or an emergency. Section 1546.2 requires that you be notified. Section 1546.4 permits a motion to suppress under Penal Code section 1538.5, though I have to be straight that suppression is available rather than automatic, and courts have applied the good faith exception. Ava: And if it is a private party? Michael, Esq.: Entirely different toolbox, and often a better one. California has a constitutional right to privacy that reaches private conduct. There is the tort of intrusion upon seclusion. There are criminal statutes on stalking and electronic harassment, and eavesdropping and recording provisions depending on what was captured. Landlord-tenant law governs entry and installation in a rental. Employment law governs an employer. Which of those applies depends on who did what. Ava: What about federal agencies? Michael, Esq.: CalECPA does not bind them. That is a real limit and people should know it up front rather than discovering it later. Ava: What should someone do this week? Michael, Esq.: Five things. Start a dated log today and keep it contemporaneously. Preserve everything — do not wipe or reset devices you think are involved, because that destroys the evidence. Request your own records: internet provider account records, and the data-access records from device makers, most of which have a formal process. If you filed a police report, get the report number. And write down the specific people who have had access to your home, your network, or your accounts, because a case needs a defendant. Ava: What should they not do? Michael, Esq.: Do not confront the person you suspect. Do not access someone else's device or account to look for proof — that is a crime and it will end your case and start a different one. And do not spend money on detection gadgets sold to this community online. Most produce readings that mean nothing in court, and the money is better spent on a forensics professional who can produce an admissible exhibit. Ava: Last question. What do you say to someone who has been dismissed by everyone they have told? Michael, Esq.: That being dismissed is not the same as being wrong, and that a lawyer's job is not to decide whether your experience is real — it is to find out whether there is a provable claim and tell you honestly either way. Some of these consultations end with a viable case. Some end with me saying the evidence is not there yet and here is what would change that. Both are real answers. And if what someone is carrying is heavier than a legal problem, I would rather say so plainly and help them find the right kind of support than pretend a lawsuit is the thing that helps. What to Do Start with evidence rather than with the technology. Keep a contemporaneous dated log; preserve devices and do not reset them; obtain your own internet provider account records and submit data-access requests to device manufacturers; retain any police report numbers; and identify every person with access to your home, network, or accounts, because a claim requires a defendant. Distinguish ordinary network behavior — background telemetry, multi-hop traceroutes with timeouts, blinking indicator lights, unfamiliar devices that turn out to be household or neighbor equipment — from an identifiable actor connected to a specific act. If a California government entity compelled your electronic communication information, CalECPA (Penal Code sections 1546 et seq.) generally required a warrant, consent, or an emergency, section 1546.2 required notice, and section 1546.4 permits a suppression motion under section 1538.5, subject to good-faith analysis; CalECPA does not bind federal agencies. If a private party is involved, California's constitutional privacy right, intrusion upon seclusion, stalking and electronic harassment statutes, eavesdropping and recording provisions, and landlord-tenant or employment law may apply instead. Do not confront a suspect, do not access anyone else's device or account, and be skeptical of consumer detection products marketed for this purpose. A V2K and RF Defense consultation in Sacramento, Stockton, or Modesto will review what you have and give you a direct answer about whether it supports a claim. This concludes the five-part Router and the Fourth Amendment series. V2K & RF Defense | Blue Data Law | Michael Benavides, Esq., CA Bar No. 270714 | Sacramento, Stockton & Modesto | 707-362-4166 | attorneymichaelbenavides.com ATTORNEY ADVERTISING. V2K & RF Defense and Blue Data are content brands of the law practice of Michael Benavides, Esq., California State Bar No. 270714. Ava is an editorial brand voice, not an attorney; only Michael Benavides, Esq. provides legal analysis. General information only — not legal advice; no attorney-client relationship is formed by reading this. Nothing in this article is medical or psychological advice, and no assessment of any individual is offered or implied. Authority referenced (Cal. Penal Code §§ 1546 et seq. and § 1538.5; Cal. Const. art. I, § 1) is as of July 2026 — confirm current law before acting. Whether any particular facts support a claim is highly fact-specific. This article describes general principles only and does not reference any actual client or pending matter. Prior results do not guarantee a similar outcome. If you are in crisis, call or text 988 for the Suicide and Crisis Lifeline, or 911 in an emergency. 

The Router Is Not the Problem. The Company Upstream Is. There is a popular version of this story where police park outside your house and read your Wi-Fi. That is mostly not what happens, and consumer routers mostly cannot do it anyway. The real collection happens somewhere less cinematic and far more consequential — at your internet provider, and at the companies that make the devices in your home. Ava asked attorney Michael Benavides what is actually being kept. Ava Asks, Michael Answers — ISP Records, Plain English Ava: What does an internet provider actually have? Michael, Esq.: More than most people assume. Subscriber identity and billing details. IP assignment logs — which account held which IP address at which moment. Connection logs with timestamps and visited domains, sometimes full URLs. The DNS queries your devices make, which is effectively a list of every service your household reached out to. And any traffic that is not encrypted travels through them in the clear. Ava: Does encryption fix it? Michael, Esq.: Partly, and the distinction matters. Modern web traffic is largely encrypted, so a provider generally cannot read the contents of what you did on a site. But they can still see that you connected, when, and for how long. Encryption protects the letter. It does not hide that you went to the post office, or how often. Ava: How long is it kept? Michael, Esq.: It varies by carrier and by record type. Reported ranges for IP assignment logs run roughly six months to two years — Comcast is commonly described around 180 days, Verizon around eighteen months. Do not treat those numbers as legal certainties; retention policies change and are not uniform. The practical point is that the window is long enough that something from last year is often still there. Ava: What legal process do investigators use? Michael, Esq.: Federally, it is tiered under the Stored Communications Act. Content of communications generally requires a warrant under 18 U.S.C. section 2703(a). Non-content records — subscriber information, session logs, IP-to-account mapping — can commonly be obtained with a subpoena or a court order under section 2703(d). That is a materially lower bar than probable cause, and it is how a great deal of routine internet investigation actually proceeds. Ava: And in California? Michael, Esq.: As we covered in the previous article, CalECPA changes that calculus for California state and local agencies, because Penal Code section 1546 defines electronic communication information to include an IP address and section 1546.1 requires a warrant, consent, or an emergency. The federal tiering and the California rule can produce different answers on the same record. Ava: What about the smart devices in the house? Michael, Esq.: Same structure, different companies. Device makers generally require a warrant or user consent for content — recordings, video. Non-content data such as subscriber information, purchase history and service usage can often be obtained on a subpoena or court order. And several vendors maintain emergency request channels that let law enforcement ask for data without a warrant and without the user's consent, on the company's assessment that an emergency exists. That is a real and under-discussed pathway. Ava: Now the part you said matters most. What is the attribution gap? Michael, Esq.: An IP address identifies an account. It does not identify a person. Those are different things and the distance between them is where a lot of cases live and die. Ava: Walk me through that. Michael, Esq.: The provider produces records showing that a particular account held a particular IP at a particular time. That gets investigators to a house. It does not get them to a hand on a keyboard. A household has roommates, spouses, children, guests, contractors. Networks get shared. Passwords get reused and given out. Some networks are open or poorly secured. Devices get borrowed and stolen. Ava: So what closes the gap? Michael, Esq.: Something other than the IP record. Physical surveillance, device forensics establishing that a specific machine did a specific thing, witness statements, or an admission. That additional proof is the case. Where it is thin, the IP record is doing work it cannot legitimately do, and that is a defense. Ava: Does a VPN change the analysis? Michael, Esq.: It changes what your provider can see, because your traffic is tunneled. It does not make you invisible, it shifts the question to what the VPN provider logs and whether that provider can be reached with legal process. I would not want anyone reading this to treat a VPN as legal protection. It is a technical measure with technical limits. Ava: What should someone do if they learn their records were obtained? Michael, Esq.: Find out three things: which agency, under what legal process, and covering what time period. Those three answers determine almost everything — whether CalECPA applied, whether the process matched the record type, and whether the scope was particular enough. Keep any notice you received. And do not try to reconstruct your own network history from memory; get the records. What to Do Internet providers retain substantial data: subscriber and billing information, IP assignment logs, connection logs with timestamps and visited domains, DNS queries, and any unencrypted traffic. Reported retention ranges run roughly six months to two years, with Comcast commonly described near 180 days and Verizon near eighteen months, though policies vary and change. Encryption protects content but not the fact and timing of connections. Federally, the Stored Communications Act requires a warrant for content under 18 U.S.C. section 2703(a) but permits subpoenas or court orders for non-content records under section 2703(d); in California, CalECPA (Penal Code sections 1546 et seq.) requires a warrant, consent, or an emergency for California government entities, and expressly includes IP addresses. Device manufacturers follow a similar content/non-content split and several maintain emergency channels that bypass both warrant and user consent. The critical limit is attribution: an IP address identifies an account, not a person, and investigators must independently establish who was actually using the connection through forensics, surveillance, witnesses, or admission. Shared households, guests, and open networks all live in that gap. If your internet records were obtained, determine which agency acted, under what process, and for what period — a Blue Data consultation in Sacramento, Stockton, or Modesto can work through it. Next in this series: your router can detect motion, falls, and breathing through walls — and the Supreme Court case that governs it was written about a thermal imager in 2001. Blue Data Law | V2K & RF Defense | Michael Benavides, Esq., CA Bar No. 270714 | Sacramento, Stockton & Modesto | 707-362-4166 | attorneymichaelbenavides.com ATTORNEY ADVERTISING. Blue Data and V2K & RF Defense are content brands of the law practice of Michael Benavides, Esq., California State Bar No. 270714. Ava is an editorial brand voice, not an attorney; only Michael Benavides, Esq. provides legal analysis. General information only — not legal advice; no attorney-client relationship is formed by reading this. Authority referenced (18 U.S.C. §§ 2701–2712, particularly § 2703; Cal. Penal Code §§ 1546 et seq.) is as of July 2026 — confirm current law before acting. Retention periods described are drawn from public reporting, vary by carrier and record type, and are subject to change; they are not legal representations about any provider. This article describes general principles only and does not reference any actual client or pending matter. Prior results do not guarantee a similar outcome. 

Federal courts say no. California's CalECPA names IP addresses in the statute and says yes. If you read the national coverage, you are wrong about your own rights.

On June 29, 2026, the Supreme Court held that location data is protected by the Fourth Amendment despite the third-party doctrine. What Chatrie says, and what it left open.

California does not require vets to give written estimates, and the Board has no power over fees. But a 2026 change to the records law gives you real leverage.

California's FEHA employment rule is broader than the ADA - support animals count, and species is not limited. What an employer can require, and what it cannot.

Yes. Business and Professions Code 4830.7 makes reporting a duty, not a choice, with civil immunity for reports. What triggers it and what protects the vet.

California has no statewide barking-dog law - it is all local ordinance plus private nuisance. What actually works, and why small claims usually cannot stop the barking.

In California an assistance animal is not a pet - no pet rent, no pet deposit, no breed or weight limits. What a landlord can and cannot ask, dog or cat.