Smart Speaker Privacy Concerns: Alexa, Google, and Siri

Smart speakers with voice assistants sit in living rooms, bedrooms, and kitchens, always listening for their wake word. Amazon Alexa, Google Assistant, and Apple Siri have been installed in over 300 million devices globally. By design, these devices continuously process audio to detect their wake word, and they occasionally activate without it, recording and transmitting conversations to company servers for processing and, in some cases, human review.

How Smart Speakers Listen

Smart speakers run a local wake word detection model that continuously processes audio from the microphone. When the model detects the wake word (“Alexa,” “Hey Google,” “Hey Siri”), it begins streaming audio to cloud servers for processing. The cloud server interprets your command, executes it, and returns a response.

The device is always listening, but the manufacturer claims that audio is only transmitted after wake word detection. However, all three companies have acknowledged that devices sometimes activate without the wake word due to similar-sounding words or phrases. A Bloomberg investigation found that Amazon employed thousands of people to listen to Alexa recordings to improve the system, and reviewers could access the associated account information.

Documented Privacy Incidents

Accidental recordings. All three platforms have documented cases of devices activating without the wake word and recording private conversations, arguments, and intimate moments. In 2018, an Amazon Echo recorded a couple’s private conversation and sent it to a random contact.

Human review programs. Amazon, Google, and Apple all employed human contractors to listen to voice recordings for quality improvement. Apple temporarily suspended its program after a whistleblower revealed that Siri recordings of drug deals, medical information, and intimate encounters were being reviewed by contractors with access to user account details.

Law enforcement access. Voice recordings stored on company servers can be subpoenaed or requested through warrants. Amazon has disclosed that it received over 3,000 law enforcement requests for user data in 2022 and complied with the majority.

Minimizing Privacy Exposure

Review and delete recordings. Amazon: Alexa app > Settings > Alexa Privacy > Review Voice History. Google: myaccount.google.com > Data & Privacy > Voice & Audio Activity. Apple: Settings > Siri & Search.

Opt out of human review. All three platforms now allow you to disable the use of recordings for service improvement. Amazon: Alexa app > Settings > Alexa Privacy > Manage Your Alexa Data. Google: Activity Controls > Voice & Audio Activity.

Use the physical mute button. When not actively using the assistant, press the microphone mute button. This physically disconnects the microphone on most devices, preventing any listening. Verify by checking that the mute indicator light is active.

Limit what you connect. Do not link your smart speaker to sensitive accounts (banking, email) or security systems (door locks, cameras) unless you accept the associated risk.

For securing the IoT ecosystem these devices belong to, see our smart device security guide. For a comprehensive privacy toolkit, explore our privacy tools for everyday use guide.

Alternatives and Modifications

If you want smart home capabilities without always-on microphones, consider smart home hubs that operate through physical controls or phone apps rather than voice commands. Zigbee and Z-Wave hubs control smart devices without cloud connectivity or microphone access.

For those who choose to keep smart speakers, placing them in common areas like kitchens and living rooms rather than bedrooms and offices limits the sensitivity of potential recordings. Some users keep speakers unplugged or muted when not actively in use, plugging them in only when they want to use voice commands.

The privacy calculus for smart speakers is personal. The convenience of voice control, hands-free timers, and quick information access has genuine value. The question is whether that value justifies a device that is physically capable of monitoring your home audio, even if the manufacturer states it only activates on the wake word. Your answer depends on your threat model, your trust in the manufacturer, and your comfort with the possibility of occasional unintended activations.