{"id":4726,"date":"2018-04-19T01:19:47","date_gmt":"2018-04-19T07:19:47","guid":{"rendered":"http:\/\/royceeddington.com\/?p=4726"},"modified":"2018-04-19T01:19:47","modified_gmt":"2018-04-19T07:19:47","slug":"amazon-echo-devices-keep-60-seconds-of-recordings-the-big-question-is-this-in-perpetuity","status":"publish","type":"post","link":"https:\/\/royceeddington.com\/?p=4726","title":{"rendered":"Amazon Echo devices keep 60 seconds of recordings. The big question &#8211; is this in perpetuity?"},"content":{"rendered":"<p>For several years, <a href=\"https:\/\/www.wired.com\/story\/amazon-echo-and-google-home-voice-data-delete\/\"> Amazon had been telling the tech world<\/a> their Echo home devices don&#8217;t &#8220;&#8230;actually do anything with your voice until you say their \u201cwake word,\u201d which is usually just &#8230; \u2018Alexa\u2019&#8221;<\/p>\n<p>There was a big story that threatened to poke a hole in that narrative. Specifically, that an Amazon echo device&#8217;s <a href=\"https:\/\/insights.dice.com\/2017\/03\/08\/amazon-echo-data-murder\/\">recordings were needed to solve a murder case.<\/a><\/p>\n<p>Amazon initially pushed back against releasing the recorded data, claiming <a href=\"https:\/\/www.wired.com\/2017\/02\/murder-case-tests-alexas-devotion-privacy\/\">&#8220;the First Amendment&#8217;s free speech protection applies to information gathered and sent by the device&#8221;<\/a>, but eventually agreed to release the data after <a href=\"https:\/\/www.cnet.com\/news\/amazon-echo-alexa-agrees-to-hand-over-data-in-murder-case\/\">&#8220;after the user&#8230; consented to the disclosure&#8221;<\/a>. The murder case <a href=\"https:\/\/www.cnn.com\/2017\/11\/30\/us\/amazon-echo-arkansas-murder-case-dismissed\/index.html\">was eventually dismissed<\/a>, but there was never any explicit information on how much data Amazon handed over to the police regarding the investigation or what the data entailed.<\/p>\n<p>The core issue remains. How exactly would an Echo device be useful in solving a murder case if it remains &#8220;off&#8221; until it is activated by the &#8220;wake word&#8221;? Why would the police want an Echo&#8217;s supposedly limited recordings?<\/p>\n<p>A new finding in a <em><strong>very<\/strong><\/em> interesting tweet from Matteo ( <a class=\"ProfileHeaderCard-screennameLink u-linkComplex js-nav\" href=\"https:\/\/twitter.com\/geminiimatt\"><span class=\"username u-dir\" dir=\"ltr\">@<b class=\"u-linkComplex-target\">geminiimatt<\/b><\/span><\/a> ) a few days ago might shed some light on that discrepancy.<\/p>\n<p>On examining the extracted data from an Amazon Echo device&#8230;<\/p>\n<blockquote class=\"twitter-tweet\" data-lang=\"en\">\n<p dir=\"ltr\" lang=\"en\">We are walking through the extracted data on an Amazon Echo. The device keeps the last 60 seconds of recording (stored in the cloud), app &amp; device. wifi username\/password. sqlllite database contents. <a href=\"https:\/\/twitter.com\/B1N2H3X?ref_src=twsrc%5Etfw\">@B1N2H3X<\/a> is giving us the tour. <a href=\"https:\/\/t.co\/FCyU6WyShG\">pic.twitter.com\/FCyU6WyShG<\/a><\/p>\n<p>\u2014 Matteo (@geminiimatt) <a href=\"https:\/\/twitter.com\/geminiimatt\/status\/985223268163575809?ref_src=twsrc%5Etfw\">April 14, 2018<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\nAmazon Echo devices keep 60 seconds of recording and stores it &#8220;in the cloud&#8221;.<\/p>\n<p>In their <a href=\"https:\/\/www.amazon.com\/gp\/help\/customer\/display.html?nodeId=201809740\">Alexa Terms of Use<\/a> page, section 1.3 states very clearly that &#8220;Amazon processes and retains your Alexa Interactions, such as your voice inputs, music playlists, and your Alexa to-do and shopping lists, in the cloud to provide and improve our services.&#8221;<\/p>\n<p>What is not stated at all is the length of retention or what happens to the data once it arrives &#8220;in the cloud&#8221;.<\/p>\n<p>With this new finding that Echo devices keep 60 seconds of recording, and combined with Amazon&#8217;s admission they do &#8220;retain&#8221; Alexa interactions, I think it is time to ask a few questions.<\/p>\n<p>Off the top of my head&#8230;<\/p>\n<ol>\n<li>Is this data stored in perpetuity?<\/li>\n<li>Is there any way for any person to review the data sent from an Echo device?<\/li>\n<li>Who has authority to review data sent from an Echo device?<\/li>\n<li>Is there a backup of this data?<\/li>\n<li>Is this data &#8220;mined&#8221;?<\/li>\n<li>How is this data secured?<\/li>\n<li>Is this data shared with any other party outside of Amazon?<\/li>\n<\/ol>\n<p>Here&#8217;s my &#8220;worst case&#8221; thinking. Amazon pulls 60 seconds from an Echo device and uploads it to the cloud. Then &#8220;deletes&#8221; the previous 60 seconds <strong><em>on the local device<\/em> <\/strong>and starts a new 60 second pull. The data uploaded from the local Echo device to the Amazon servers is <em><strong>never<\/strong><\/em> deleted on the Amazon servers. The data is stored forever, stamped by device name, location, wifi username and password, and sqlllite database contents. Every 60 seconds on every Echo device.<\/p>\n<p>If this isn&#8217;t the case, if Echo devices really do just wait for the &#8220;wake word&#8221; and the findings by the community and the beliefs of the police are in error, a clear and detailed statement from Amazon on the Echo&#8217;s data retention would go a long way.<\/p>\n<p>Personally, <a href=\"https:\/\/royceeddington.com\/?p=4300\">I&#8217;m still wondering why Amazon Dash buttons have embedded microphones.<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>For several years, Amazon had been telling the tech world their Echo home devices don&#8217;t &#8220;&#8230;actually do anything with your voice until you say their \u201cwake word,\u201d which is usually just &#8230; \u2018Alexa\u2019&#8221; There was a big story that threatened &hellip; <a href=\"https:\/\/royceeddington.com\/?p=4726\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[5],"tags":[],"class_list":["post-4726","post","type-post","status-publish","format-standard","hentry","category-tech"],"aioseo_notices":[],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p6Pfyw-1ee","jetpack_sharing_enabled":true,"jetpack-related-posts":[],"_links":{"self":[{"href":"https:\/\/royceeddington.com\/index.php?rest_route=\/wp\/v2\/posts\/4726","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/royceeddington.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/royceeddington.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/royceeddington.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/royceeddington.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4726"}],"version-history":[{"count":4,"href":"https:\/\/royceeddington.com\/index.php?rest_route=\/wp\/v2\/posts\/4726\/revisions"}],"predecessor-version":[{"id":4730,"href":"https:\/\/royceeddington.com\/index.php?rest_route=\/wp\/v2\/posts\/4726\/revisions\/4730"}],"wp:attachment":[{"href":"https:\/\/royceeddington.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4726"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/royceeddington.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4726"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/royceeddington.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4726"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}