Amazon’s Echo and Personal Privacy

Wrongo’s daughter gave him an Amazon Echo Dot for his birthday. Bob Lefsetz says that Amazon is becoming the new Apple: (brackets by the Wrongologist)

The Echo came with almost no instructions. Simple packaging. Not a work of art, like [Steve] Jobs’ creations, but far from the old Microsoft where there’s so much info you’re inundated.

Simple and slick, particularly when it comes to using Echo to listen to music on Spotify, (assuming that you have Spotify premium) because Alexa eliminates a step. Before the Echo, you navigated your PC or mobile to Spotify’s site, entered the artist or track you wanted to hear in Spotify’s clunky search engine, then waited for the track to pop up, and then clicked on it to play.

With Alexa, you say the name of the track and/or the artist, and tell Alexa you want to hear it on Spotify, and it begins playing. Very nice.

Alexa brought in yuuge sales numbers for Amazon this season. Bloomberg reported:

Sales for Echo speakers based on Alexa’s voice-recognition software were nine times more than the 2015 holiday season…Echo and Echo Dot were the best-selling products across Amazon this year…

Sales were so good that Amazon sold out of its Echo speakers in mid-December. The Echo shortage shows voice-activated assistants have found a strong niche with consumers. Smart home devices in general are booming at the moment and so it the desire for installation services like crestron programming. But there’s a potential dark side to having an Alexa device: Alexa’s job is to listen to you speak, and then recognize and use those data.

This begs the question of whether you should have any expectations of privacy if Alexa is plugged in. If you think this is an academic question, consider that police in Arkansas want to know what an Amazon Echo device may have heard during a murder:

Authorities in Bentonville issued a warrant for Amazon to hand over any audio or records from an Echo belonging to James Andrew Bates. Bates is set to go to trial for first-degree murder for the death of Victor Collins next year.

Sound Orwellian to you? Your hot new Xmas gift may be the Trojan horse that kills your privacy.

Police say Bates had several other discoverable smart devices, including a smart water meter. The water meter shows that 140 gallons of water were used between 1 AM and 3 AM the night Collins was found dead in Bates’ hot tub. The police think all that water was used to wash away evidence of what happened that night.

The data from the water meter, and the request for stored Echo information raise questions about what constitutes individual privacy in the internet of things (IoT). Due to the “always on” nature of the Echo, authorities want any saved audio the speaker may have picked up that night. The Echo is supposed to be only activated by certain words, but it spoke random answers to Wrongo, when not asked a question, if the room it was in was filled with people over the holidays.

What’s more, Echo captures audio and streams it to the cloud when the device hears a wake word, such as “Alexa.” What the owner says are called “utterances” by Amazon, and they are stored in the cloud until a customer deletes them either individually, or all at once.

Why does Amazon save your words? Probably because you can order items from them via the Echo. A record of the sale could be necessary in a dispute.

In the Bates case, Amazon would not provide the police with any information that Bates’ Echo had logged on its servers. It later released a statement:

Amazon will not release customer information without a valid and binding legal demand properly served on us. Amazon objects to overbroad or otherwise inappropriate demands as a matter of course.

So, Amazon just told the Bentonville police and police everywhere what they have to do to get your stored information: Your privacy is in play if you have an Echo, and you get arrested.

We have an expectation of privacy in our homes, but these devices listen to you, they talk to each other, and to companies like Amazon and Spotify, so the challenge to individual privacy seems very clear. Governments from city to federal, will try to develop any information they can about a criminal case. If those data are gleaned from a smart device in your home, it’s just another data point, and it will become your job to make the case that your Constitutional rights were violated.

The Constitutional question is whether the data you generate in your home through internet-connected devices are data that you own at all. Do you share ownership with corporate America?

Does the state have rights to your private information if they say they need it?

Tip: Alexa has a microphone off button. Use it. Its possible that Amazon can’t hear you then.

Facebooklinkedinrss