AGENCY’s smart home case study examines the digital risks, harms, and vulnerabilities associated with the Internet of Things (IoT) ecosystem in domestic settings. Smart home systems provide many benefits that enhance the well-being of their users. Smart home technologies aim to promote autonomy and agency, particularly for individuals with health challenges and other vulnerabilities, by simplifying daily routines. However, as these technologies become more accessible and affordable, they have become susceptible to varying levels of digital abuse, leading to concerns about tech-enabled domestic violence that generate complex ethical and security concerns. “Tech abuse” in smart homes covers various forms of harm including harassment, monitoring, and revenge. Often, bad actors exploit the intimate knowledge of victims, their daily routines, and digital preferences. Smart devices can also be subject to external harms involving surveillance by relevant authorities, hacking, and adversarial attacks. Other examples include remotely controlling, spying through audio and video functions, and altering smart thermostats to traumatize user living conditions. AGENCY’s smart home case study seeks citizen-centred design solutions to these vulnerabilities, risks, and harms. This case study’s aim is to identify methods to enhance privacy and security and cede more autonomy and agency to users rendered vulnerable by smart home technologies according to varied contexts of use.