Yesterday, Wired reported that the American Civil Liberties Union (ACLU) was raising questions about Apple's privacy policies regarding Siri, citing vague statements indicating that older "disassociated" voice clips would be kept for a "period of time" even if a user deactivated Siri on his or her device.
“It’s not clear what ‘disassociated’ means. It’s not clear what ‘period of time’ means. It’s not clear what using it to ‘generally improve Siri and other Apple products and services’ means,” says Nicole Ozer, a lawyer with the ACLU. “The only thing that’s clear is we really don’t know what may be happening to the personal information we have told Siri, even after we turn Siri off.”
The report noted that privacy concerns have led to instances where companies such as IBM have banned the use of Siri.
In a follow-up report today, Wired shares official word from Apple that such data is stored in anonymized form for two years and reveals general details on how that data is anonymized.
Here’s what happens. Whenever you speak into Apple’s voice activated personal digital assistant, it ships it off to Apple’s data farm for analysis. Apple generates a random numbers to represent the user and it associates the voice files with that number. This number — not your Apple user ID or email address — represents you as far as Siri’s back-end voice analysis system is concerned.
Once the voice recording is six months old, Apple “disassociates” your user number from the clip, deleting the number from the voice file. But it keeps these disassociated files for up to 18 more months for testing and product improvement purposes.
Ozer suggests that Apple should go further in publicizing these privacy policies, linking them directly from Apple's Siri FAQ page, and that users should always be mindful of what they are saying to Siri because "Siri works for Apple".
