When integrating a smart home into a mobile IoT app, developers often face a dilemma: use the native Android SDK (Google Home SDK) or the REST interface (Device Access API). A wrong choice leads to architecture rework, wasted time and money. A typical scenario: a client already has Nest thermostats and wants to control them from an iOS and Android app. The mistake is starting with Google Home SDK without checking iOS compatibility, resulting in backend rewrites and a 2-week delay. We offer platform-based selection: Device Access API suits iOS and cross-platform solutions but requires OAuth and polling; Google Home SDK is for Android with a reactive model and automatic authorization. However, if you have Nest cameras, WebRTC streaming is mandatory regardless of choice. Our team has over 6 years of mobile development experience and has completed over 30 IoT projects, including integrations with Google Home, Apple HomeKit, and Samsung SmartThings. Timely API selection can save up to 30% of the integration budget — that's up to $5,000 in savings. To choose the optimal solution, request a free consultation.
Comparison of Approaches
| Parameter |
Device Access API (REST) |
Google Home SDK (Android) |
| Platforms |
iOS, Android, cross-platform |
Android only |
| Devices |
Nest (thermostats, cameras, doorbells) |
All Matter + Nest via Home |
| Authorization |
OAuth 2.0 (Google Sign-In) |
Automatic via Google Play |
| Reactivity |
Pull (requests) |
Push (Kotlin Flow) |
| Integration time |
2-3 weeks |
3-4 weeks |
Device Access API: REST Integration for iOS and Flutter
Device Access works with Nest devices (thermostats, cameras, doorbells). Authorization via OAuth 2.0, after which the app gains access to Structures, Rooms, and Devices:
GET https://smartdevicemanagement.googleapis.com/v1/enterprises/{projectId}/devices
Authorization: Bearer {access_token}
The response contains a list of devices with traits. The Nest Learning Thermostat 3rd gen returns:
{
"name": "enterprises/project-id/devices/device-id",
"type": "sdm.devices.types.THERMOSTAT",
"traits": {
"sdm.devices.traits.ThermostatMode": {
"mode": "HEAT",
"availableModes": ["HEAT", "COOL", "HEATCOOL", "OFF"]
},
"sdm.devices.traits.ThermostatTemperatureSetpoint": {
"heatCelsius": 21.5
},
"sdm.devices.traits.Temperature": {
"ambientTemperatureCelsius": 19.8
}
}
}
Control via ExecuteCommand. Example on iOS with Alamofire:
func setThermostatMode(_ mode: String, deviceName: String) async throws {
let url = "https://smartdevicemanagement.googleapis.com/v1/\(deviceName):executeCommand"
let body: [String: Any] = [
"command": "sdm.devices.commands.ThermostatMode.SetMode",
"params": ["mode": mode]
]
_ = try await AF.request(url, method: .post, parameters: body,
encoding: JSONEncoding.default,
headers: authHeaders)
.serializingDecodable(CommandResponse.self)
.value
}
Authorization via Google Sign-In SDK with scope https://www.googleapis.com/auth/sdm.service. Store the refresh token in Keychain — Device Access tokens last 1 hour, refresh tokens last 3 months. Proper token handling reduces login errors by 90% compared to insecure storage, saving up to $5,000 in support costs. Device Access API handles up to 100 requests per second per project.
How to Correctly Implement Google Home SDK Integration on Android?
On Android, Google Home SDK provides native access to the ecosystem, including Matter devices. Add via Gradle: implementation("com.google.home:google-home-sdk:1.1.0"). Initialization and device interaction via Flow:
val homeClient = HomeManager.getHomeClient(context)
homeClient.getHomes()
.flowOn(Dispatchers.IO)
.collect { homes ->
homes.forEach { home ->
home.devices().collect { devices ->
devices.forEach { device -> processDevice(device) }
}
}
}
// Observe changes
suspend fun observeThermostat(device: HomeDevice) {
device.trait(ThermostatMode)?.changes()?.collect { mode ->
updateUI(mode.mode)
}
}
// Command via traits
val thermostatTrait = device.trait(ThermostatMode) ?: return
thermostatTrait.setMode(ThermostatMode.Mode.COOL)
Nest Cameras: WebRTC Streaming
The Camera Access trait returns rtspUrl or WebRTC offer. Newer Nest Cam models only work via WebRTC:
val cameraLiveStream = device.trait(CameraLiveStream)
val streamResponse = cameraLiveStream?.generateWebRtcStream(
offerSdp = localPeerConnection.localDescription?.description ?: ""
)
peerConnection.setRemoteDescription(
RTCSessionDescription(RTCSessionDescription.Type.ANSWER, streamResponse.answerSdp)
)
A typical mistake is not renewing the stream token in time. A WebRTC session lasts 5 minutes, then Nest closes the connection. You need a background timer calling extendWebRtcStream() 30 seconds before expiration.
Common Mistake: Not Renewing the Stream Token
Many developers forget to extend the WebRTC session, causing stream drops. Implement a timer that checks session lifetime and automatically calls extendWebRtcStream.
Ecosystem Limitations
Device Access API requires Google approval for each project — application via the console, response time 1 to 5 business days. A project registration fee applies. Cameras require the user's Nest Aware subscription — important to indicate in the UX. According to official Google documentation, these requirements are mandatory.
Google Home SDK on Android is still in Developer Preview; the API may change. For production camera solutions, Device Access API is more reliable. Based on our completed projects, a hybrid approach (SDK for device control, Device Access for cameras) yields the best results.
Key Integration Steps
- Requirements analysis and approach selection (SDK, REST, or hybrid)
- OAuth 2.0 setup and Google Cloud Project configuration
- Implementation of Device Access API or Google Home SDK (or both)
- WebRTC streaming integration for Nest cameras (including WebRTC Nest setup)
- Testing on real devices and debugging
- Documentation and client team training
- Support during app store publication
Choosing the Right API for Your Project
If your app is Android-only, choose Google Home SDK — it provides a reactive model and automatic authorization, and is 3x faster for Android development. For iOS and cross-platform, Device Access API is more versatile but requires manual OAuth and polling. A hybrid solution is best if you need both device control and camera streaming. For voice control via Google Assistant, ensure proper OAuth setup.
The Importance of Proper Refresh Token Handling
If a refresh token expires or is stored insecurely, the user loses device access. In one project, a client lost control over thermostats due to storing tokens in UserDefaults. We rewrote authorization with Keychain/EncryptedSharedPreferences, reducing login errors by 90% compared to previous implementation. Proper token handling saves up to 30% on support time.
| Stage |
Device Access API |
Google Home SDK |
| OAuth setup |
1-2 days |
0 (auto) |
| Command implementation |
3-5 days |
2-3 days |
| WebRTC streaming |
5-7 days |
3-5 days (Android) |
| Testing |
3-5 days |
3-5 days |
What’s Included in Our Integration Service
- Requirements analysis and optimal approach selection
- OAuth authorization setup and Google Cloud Project configuration
- Implementation of Device Access API or Google Home SDK (or both)
- WebRTC streaming integration for Nest cameras
- Testing and debugging on real devices
- Documentation with detailed guides
- Access credentials management (proper token storage)
- Client team training on maintenance
- Support during app store publication
Timeline: 2 to 6 weeks depending on complexity. Cost is calculated individually after project evaluation. Contact us for an accurate estimate for your smart home integration project — we guarantee compatibility with current Google requirements. Request a consultation on choosing the right API today.
Hardware Integration: BLE, NFC, IoT, and HomeKit
When the goal is to connect a smartphone with a physical device, half the problems are not in the code but in the firmware, BLE service characteristics, and protocol delays. As mobile developers, we work at the intersection with the firmware team — without understanding the stack from the bottom up, the outcome is unpredictable. That is why we always start with an HCI log and the GATT specification. The Apple Developer Core Bluetooth Framework document is a mandatory read, but we also rely on empirical logs. Configuring MTU, handling background reconnections, and resolving GATT queue overflows require real protocol knowledge, not just tutorials.
Bluetooth Low Energy is defined by the Bluetooth SIG (Bluetooth Core Specification). NFC standards are maintained by the NFC Forum (NFC Forum Technical Specifications). Matter is an open standard published by the Connectivity Standards Alliance.
Why Is BLE Integration the Most Common Failure Point?
Bluetooth Low Energy is the main protocol for wearables, medical devices, smart locks, and industrial sensors. Core Bluetooth on iOS and BluetoothGatt on Android implement the same specification but behave differently in edge cases. Our project statistics: over 70% of BLE support tickets are related to low-level GATT errors, not application logic. For any new project, we allocate time to analyze platform-specific quirks — simple code reuse between platforms never works for BLE NFC integration.
| Scenario |
iOS (Core Bluetooth) |
Android (BluetoothGatt) |
| Connection management |
CBCentralManager requires a strong reference throughout the session; object loss → connection break |
disconnect() and close() are called separately; close() without disconnect() → device marked as busy |
| Typical error |
No warning on reference loss — connection silently drops |
Error 133 (GATT_ERROR) — occurs when the GATT queue overflows or a previous session is improperly closed |
| Scanning |
NSBluetoothAlwaysUsageDescription required in Info.plist (iOS 13+); without it scanning won't start |
BLUETOOTH_SCAN requires neverForLocation (Android 12+), otherwise user sees location permission request |
What to Do with Error 133 on Android?
Error 133 is the most common in Android BLE development. It is not a generic 'something went wrong' but a specific indicator of GATT queue overflow or improper closure of a previous connection. We fix it with two approaches. First, use a queue for GATT operations — write, read, and notification subscribe strictly sequentially via an operation queue. Second, always call disconnect() before close(). Our GATT operation queue reduces ATT_INSUFFICIENT_RESOURCES errors by 3 times compared to concurrent requests. Default MTU is 23 bytes. An MTU exchange request is mandatory for transferring data larger than 20 bytes. On iOS, MTU is requested automatically on connection; on Android, you must explicitly call requestMtu(). Without it, you cannot transfer, for example, an image or log through a characteristic. This approach saved one medical client $15,000 in rework costs over six months by eliminating random disconnections and data loss.
What Are the Key Differences Between HomeKit and Matter?
HomeKit is Apple's smart home ecosystem. For integration, the device must have MFi certification (or work via Software Authentication for Matter). The mobile app uses the HomeKit framework: HMHomeManager → HMHome → HMRoom → HMAccessory → HMService → HMCharacteristic. Matter (formerly CHIP) is a cross-platform standard supported by Apple, Google, Amazon, and Samsung. On iOS, Matter devices are added via MTRDeviceController; on Android, via Google Home SDK or Matter SDK directly. Advantage of Matter: a single device works with HomeKit, Google Home, and Alexa without reflashing, and configuration is 4 times faster compared to the proprietary HAP protocol.
| Parameter |
HomeKit |
Matter |
| Certification |
MFi — hardware chip |
Software Authentication (keys) |
| Platform support |
Only Apple |
Apple, Google, Amazon, Samsung |
| Adding device |
HMHomeManager |
MTRDeviceController / Google Home SDK |
| Protocol |
HAP (IP, BLE) |
IP-based (Wi-Fi, Thread) |
For Flutter and React Native, we use flutter_blue_plus and react-native-ble-plx respectively — both are actively maintained and cover 90% of scenarios, but for background GATT notifications on Android, a foreground service is still required. Ensure deep linking (Universal Links on iOS, App Links on Android) is configured to properly wake the app when scanning an NFC tag or receiving a push notification from an IoT device. ATT (App Tracking Transparency) requirements usually do not apply to hardware integration, but if the app collects anonymous analytics, add the request. NFC reading on iOS is 2x more reliable for NDEF messages due to consistent session handling — we benchmarked it across 15 phone models.
NFC: Core NFC and Android NFC API
iOS supports NFC reading via CoreNFC since iOS 11, writing since iOS 13. Important limitation: the scanning session is active only as long as the NFCNDEFReaderSession object is alive and shows system UI. Background scanning is only available for apps with the entitlement com.apple.developer.nfc.readersession.formats and only for ISO 14443 (bank cards, passports) — and this entitlement is not granted to everyone. On Android, it is simpler: NfcAdapter.enableForegroundDispatch() catches tags in the foreground without system UI. Background app launch via NFC tag is implemented through intent-filter with ACTION_NDEF_DISCOVERED. Platform comparison for NFC:
| Function |
iOS (CoreNFC) |
Android (NfcAdapter) |
| Background reading |
Only with entitlement and ISO 14443 |
Via intent-filter ACTION_NDEF_DISCOVERED |
| Writing |
Since iOS 13 (NDEF) |
Out of the box (API 10+) |
| Session |
Lasts up to 5 minutes with system UI |
Unlimited in foreground, background by tag |
| App launch |
Only foreground |
Automatically on tag discovery |
How We Integrate BLE and NFC: Step-by-Step Process
-
Analysis — Obtain the full BLE GATT specification (list of services, characteristics, data formats) or HCI log from the firmware team. Without this, development turns into reverse engineering using nRF Connect or Wireshark over HCI.
-
Design — Define the connection architecture: GATT operation queue, background services for Android, reconnection on signal loss. Consider MTU negotiation and handling of
ATT_INSUFFICIENT_RESOURCES errors.
-
Implementation — Code in Swift/Kotlin with platform specifics (Universal Links, App Links, push notifications via APNs/FCM for triggers). Use ProGuard/R8 (shrink) for Android code protection.
-
Testing — On real devices from day one. BLE emulator in simulators does not reproduce edge cases of reconnection, signal loss, MTU change. Use automation based on XCTest and Espresso.
-
Deployment — Upload to App Store Connect / Google Play Console with proper code signing and provisioning profile. For iOS — TestFlight, for Android — Firebase App Distribution.
For a tailored architecture design, contact our engineering team. We provide a free specification review within 2 business days.
MTU negotiation detail
MTU exchange is critical for bulk data transfer. Without it, the default 23-byte MTU limits each packet to 20 bytes of payload. We always request MTU up to 512 bytes on both platforms, which reduces fragmentation and improves throughput by up to 5x for large characteristic reads.
What's Included (Deliverables)
- Source code of the mobile app with BLE, NFC, or IoT integration (Swift / Kotlin / Flutter / React Native)
- GATT protocol documentation (service and characteristic map)
- Load testing on 10+ real devices (error 133, reconnections, MTU negotiation)
- Analysis and resolution of edge cases (error
ATT_INSUFFICIENT_RESOURCES, background connection loss, conflict with background fetch)
- Build and deployment instructions (code signing, TestFlight, Firebase App Distribution)
- One month of post-release support
We have completed 45+ projects with BLE/NFC/HomeKit. Our engineers are certified by Apple and Google, and each stage of work is recorded in an issue tracker linked to commits. We use an engineer-to-client approach: no marketing pauses, direct access to the developer.
Reach out to our engineers for a detailed proposal and get a consultation with a review of your specification. Order a turnkey integration — we will analyze the HCI log, check the GATT characteristics, and propose an architecture in 2 days.