A smart city should not be built on spyware, or entice or even require citizens to use nonfree software. But what would be a smart city that respects people's freedom? It could be as simple as having api endpoints for city services, with publicly available reference/official free client implementations. The backend is less important whose freeness does not affect citizens freedom. The service cannot be SaaSS, of course.