Alexa and her "presence " in Amazon Echo devices

I found the following rather disconcerting regarding privacy . It is an article written by
Emma McGowan , taken from Avast Anti Virus Newsletter.

What Amazon Echo tracks

First things first: Amazon Echo says it’s not recording and storing all of your conversations. It’s designed to respond to its “wake” word, which is usually Alexa, but you can change it to whatever you want. Once it’s alerted to its wake word being spoken, it starts recording from that point, but also includes about three second before the word was spoken. The only time it is supposed to record and send data back to the Amazon cloud is when that trigger word is spoken.

For US customers, the Amazon Echo knows “all information related to your use of Alexa and Alexa Enabled Products, including your voice and other inputs, responses provided to you through Alexa, information [they] receive in connection with Third Party Services and Auxiliary Products you use, and information and content you provide or receive through the Alexa App.” In the UK, they know your voice and they “may” back up certain info to the cloud, including “account settings, notes, email and wireless configurations, bookmarks, search history, communications, and call history.” And for the rest of Europe, Amazon has country-by-country rules.

What does Amazon Echo do with my data?

Amazon uses their data for all of the reasons most companies use data: to provide services and products; to help improve their products; to give recommendations and personalized service; to communicate with customers; to “provide voice, image, and camera service;” to “comply with legal obligations;” to prevent fraud and credit risks — and for advertising.

The Amazon Privacy Policy states that they’re “not in the business of selling” customers’ personal information. But it also says that their “services” might include third-party advertising and links to other websites and apps and that “third-party advertising partners may collect information about you when you interact with their content, advertising, and services.”

Amazon also gives users the option to review and delete recordings one-by-one or by date range. There’s also an option to set it up to verbally ask Alexa to delete your recordings.

What am I getting in exchange for my data? What are the tradeoffs?

An Alexa user is getting the convenience of a voice assistant, which can be fun and useful. But they’re also tapping into Amazon’s vast data collection project, which includes information from services ranging from Prime to Prime TV to Kindle to AWS to… You get the idea. The point is that Amazon has a lot of information on the average person in the United States and Europe (as well as elsewhere, but those are its primary markets) already. Choosing to use any Alexa-enabled device means adding more data to their database. That’s especially interesting when you consider what’s not included in the Amazon Privacy Policy: Data aggregation.

“Privacy policies are specifically designed to withstand legal battering and provide legal cover,” Avast Senior Global Threat Communications Manager Christopher Budd says. “So if something is specifically not mentioned in there, then that means that they essentially have carte blanche to do with it whatever they want. They haven’t said what they’re going to do with it — but they haven’t said what they aren’t going to do with it.”

In other words: Keep an eye on what they’re not saying. And I think there’s enough research out there already to know that Amazon loves data aggregation — and we don’t know what they might ultimately do with their datasets.

Finally, there are already recorded cases of Alexa data being accessed by law enforcement and used in legal cases. While some companies — like Apple, for example — have resisted law enforcement requests, Amazon has been more cooperative.

“If there is data and it’s being stored and especially if the data is being stored on another company’s systems, at some point some law enforcement or an intelligence agency is going to try to lay hands on it,” Budd says. “So until the case law is really sorted out, you don’t know if that data could be scooped up. If you are a risk-averse person — like I am in some ways — the best move is to just not play the game.”

The conclusion for this one, then, is actually a question: What’s your level of comfort with Amazon? How much of your data do you feel comfortable with them having? And how thoroughly do you want them inside your home? Those aren’t questions I can answer for you — but they’re ones we should all be asking.

10 Likes

Amazon has no need to sell your personal data to third parties. The company is such a behemoth that it can use all the data it collects internally.

6 Likes

Isn’t this a contradiction?

If it includes 3 seconds of audio prior to the wake word’s being spoken then surely it must have been recording 24x7 - but potentially discarding all but the last 3 seconds e.g. record all the time but into a 3 second buffer.

By definition it must be listening all the time (listening for the wake word) but to include 3 seconds of prior audio it must also be recording all the time. Right?

One issue not really covered by the article is … jurisdiction. In many cases, and certainly without any visibility to you, your information may be being sent overseas, where it may or may not be subject to Australian law and may be subject to the law of another country (and then potentially trafficked back to Australia if it would be illegal to collect the information directly within Australia).

3 Likes