Apple Explains Privacy Policy Behind 'Hey Siri' and Live Photos

[MacRumors]

Recently, Apple has been quick to point out that security and privacy for its users is a priority for the company, repeatedly noting that Apple does not rely on serving ads based on user data to make money. Yesterday, Apple announced two new features, Live Photos and 'Hey Siri', that have raised questions about the privacy and security about the features. The company explained its privacy procedures to TechCrunch.

Live Photos are treated like any other photo or video on an iPhone, which means that the Live Photo is encrypted at all times. The only way a Live Photo leaves a device is when a user decides to share it or selects to use iCloud. Live Photos record the 1.5 seconds before and after your picture, though Apple says the camera is restricted in what it can save.

"Although the camera is "recording" while you're in Live Photo mode, the device will not save the 1.5 seconds before until you press the camera button," says Apple. "The pre-captured images are not saved to the user's device nor are they sent off the device."

This means that the camera is always recording the last 1.5 seconds of footage it sees, though it will continuously delete that footage unless it's "saved" when a user takes a photo. The 1.5 seconds after a photo is taken is also saved when a user takes a photo. Live Photos is turned on by default, but a user can turn it off by clicking the orange Live icon in between the HDR and timer icons.

Hey Siri allows a user to active Apple's personal assistant with their voice, which means that the iPhone has to constantly "listen" for a user's vocal activation. However, Apple tells TechCrunch that nothing a user says is recorded until Hey Siri is activated.

The feature can only be activated in a two-step matching process. First, the iPhone must "hear" the general "Hey Siri" activation phrase. The phone then must match that activation phrase with the personalized way the user says "Hey Siri", which prevents the feature from activating when other people say the phrase. If the phone "hears" "Hey Siri" but it's not a vocal match for its owner, the feature will not activate. This process is done locally on the device, and no audio is sent off of the iPhone.

After "Hey Siri" is activated, the privacy and security protocols in place work similarly to how Siri works now. Audio is sent off to Apple and associated with a device using a random identifier rather than an Apple ID or other personal information. If a user turns off Siri, Apple will delete all the User Data associated with the random identifier.

"Hey Siri" is an optional feature that a user must opt into during iOS 9's setup process. Users, if they choose, can opt to never enable the feature.

The full explanation, including descriptions directly from Apple, can be read at TechCrunch.

Article Link: Apple Explains Privacy Policy Behind 'Hey Siri' and Live Photos

 

[bobenhaus]

Ahh so Siri's data is stored on Apple's data servers until Siri is turned off completely on the actual iOS device? So in theory the user's data can be on Apple's data servers for years? hmm.

 

[chromite]

I used Siri for a few months when I first received iPhone 4s but then turned it off because I could usually complete whatever the task was faster than Siri could. Consequently it's been off on my 5s and my 6 Plus. However Apple seems to be throwing a lot of time and energy into Siri so I'll definitely be turning it on and seeing what it's like.

 

[ctdonath]

Rather a contrast to Cortana, which seems aggressively [re-]enabled and leveraged who knows how for data mining.

 

[Harmonious Zen]

Rather a contrast to Cortana, which seems aggressively [re-]enabled and leveraged who knows how for data mining.

Just take a look at a company's business model and you'll know whether to worry or not. (Cough) Google.

 

[dugbug]

Ahh so Siri's data is stored on Apple's data servers until Siri is turned off completely on the actual iOS device? So in theory the user's data can be on Apple's data servers for years? hmm.

I seriously doubt the data stays any longer than enough to do context follow on questions. Tech crunch article dealt more with initiating and was not a white paper on all the details

 

[citysnaps]

I seriously doubt the data stays any longer than enough to do context follow on questions. Tech crunch article dealt more with initiating and was not a white paper on all the details

And, to the extent that it is, it's tagged to an anonymous id.

 

[unobtainium]

So if I send a photo to someone from my iOS device, the before-and-after stuff stays on my device? In most situations, I have no desire to send 1.5 seconds before and after my photo.

 

[jsmith189]

So if I send a photo to someone from my iOS device, the before-and-after stuff stays on my device? In most situations, I have no desire to send 1.5 seconds before and after my photo.

I just wanna know what happens if I send a live photo. Will the recipient have the before and after, even if I didn't mean for them to?

 

[miknos]

To have a device constantly listening the environment is creepy.
Apple, Google, Amazon and many others are implementing that.

We never know if the company is working with government to "protect us" or if the device was hacked. That's my first impression.

 

[Devie]

The way Apple is about their customers privacy is the main reason I still use them as my primary personal devices even when I know another company may have a better or cheaper offering to perform the same task.
Keep this up Tim and I'll continue being a customer for life.

 

[Devie]

To have a device constantly listening the environment is creepy.
Apple, Google, Amazon and many others are implementing that.

We never know if the company is working with government to "protect us" or if the device was hacked. That's my first impression.

If the device was hacked they could just activate the mic and other features anyway.

 

[MacTouch786]

I just wanna know what happens if I send a live photo. Will the recipient have the before and after, even if I didn't mean for them to?

It appears that you'll have a choice. You can send them the Live Photo as a still image if you choose. You can also save it as a still image separately. If you want to send the full Live Photo, they can only view it if they have iOS 9 or later.

 

[Edgar Spayce]

Not believing one word of it. Because I'm one of the many smarts, I know it's BS

 

[Sill]

To have a device constantly listening the environment is creepy.
Apple, Google, Amazon and many others are implementing that.

We never know if the company is working with government to "protect us" or if the device was hacked. That's my first impression.

This.

 

[Razeus]

The way Apple is about their customers privacy is the main reason I still use them as my primary personal devices even when I know another company may have a better or cheaper offering to perform the same task.
Keep this up Tim and I'll continue being a customer for life.

And a customer who's always behind.

 

[iSee]

"Although the camera is "recording" while you're in Live Photo mode, the device will not save the 1.5 seconds before until you press the camera button," says Apple. "The pre-captured images are not saved to the user's device nor are they sent off the device."

This means that the camera is always recording the last 1.5 seconds of footage it sees, though it will continuously delete that footage unless it's "saved" when a user takes a photo.

Good grief! No, that's not what it means. "Will not save" means it will not save, not that it really did save it and then continuously deletes it.

To have a device constantly listening the environment is creepy.
Apple, Google, Amazon and many others are implementing that.

We never know if the company is working with government to "protect us" or if the device was hacked. That's my first impression.

If someone is using the mic in your device to secretly monitor you they have no particular need to tie it to a feature like "Hey Siri".

 

[SteveW928]

I wonder if there should be a little disclaimer to this effect: Unless the State Department directs Apple to do otherwise... which they wouldn't have to disclose... and if it were ever found out and any problems arose, they are legally indemnified.

 

[ardent73]

To have a device constantly listening the environment is creepy.
Apple, Google, Amazon and many others are implementing that.

We never know if the company is working with government to "protect us" or if the device was hacked. That's my first impression.

Analog televisions and analog landline telephones were always listening, long before laser microphones.

 

[SteveW928]

Good grief! No, that's not what it means. "Will not save" means it will not save, not that it really did save it and then continuously deletes it.

Good grief... actually think about what's being said vs just trusting a wooden reading of the text. So, if it weren't saving that 1.5 seconds, how would it include with the photo? Of course it's being saved, and then hopefully, deleted.

But, good point about "Hey Siri." If the govt wants Apple to monitor, they'll monitor and you'll likely not know about it... or of course, if hacked, the hacker could do it at will. Either of those could be detected though, so I doubt they would be constantly used.

What's more likely is that any audio/data that is sent to Apple, Google, etc. for processing is also being analyzed by the government. In fact, that's exactly what Comey recently talked about (I forget the technical term now) and is trying to strike deals with all these tech companies to do. And, since the companies are paid for it, don't have to disclose it, and are actually protected by government order against any damages resulting from their doing so.... why wouldn't they? (I guess if you actually believe they are morally above that... um, yea.)

Oh, and I need to add that in the above situation, encryption is meaningless because it's the transmission that is encrypted... but it's unencrypted once it reaches the service provider (i.e.: Google, Apple, etc.) so it can be processed. And, Comey wants the 'encrypted' aspect stressed because that encourages most people into believing their privacy is being protected.

 

[doelcm82]

Good grief! No, that's not what it means. "Will not save" means it will not save, not that it really did save it and then continuously deletes it.

I believe it means it is continuously buffered in RAM, and only gets saved to the flash memory if the user invokes the "shutter" to take a photo. Perhaps that area of RAM gets continuously overwritten by new buffered images that are three seconds newer. But in order to save a picture starting a second and a half before you even told it you wanted to take a picture, the data for that lead-in has to be saved somewhere.

 

[SteveW928]

I believe it means it is continuously buffered in RAM, and only gets saved to the flash memory if the user invokes the "shutter" to take a photo. Perhaps that area of RAM gets continuously overwritten by new buffered images that are three seconds newer. But in order to save a picture starting a second and a half before you even told it you wanted to take a picture, the data for that lead-in has to be saved somewhere.

Good point... I guess there is kind of a fine-line there. Better language might be 'does not retain (long-term)' or something like that.

 

[bobenhaus]

I seriously doubt the data stays any longer than enough to do context follow on questions. Tech crunch article dealt more with initiating and was not a white paper on all the details

 

[You are the One]

Just take a look at a company's business model and you'll know whether to worry or not. (Cough) Google.

Indeed, I commented on that here #170. It's all in the EULA. Read the one for Win10 and run.

 

[bookwormsy]

I used Siri for a few months when I first received iPhone 4s but then turned it off because I could usually complete whatever the task was faster than Siri could. Consequently it's been off on my 5s and my 6 Plus. However Apple seems to be throwing a lot of time and energy into Siri so I'll definitely be turning it on and seeing what it's like.

I like to use Siri when I'm driving (for example) or walking somewhere and I want to send a quick text (eg "Hey, I'm running a little late. I'll be there in 10") and to look up something real quick, or to type longer sentences in texts and emails (eg "Does the letter or card need to be actually handwritten, or can I type it? My handwriting is very awful, and I feel like typing the letter would make things easier for all parties." [actual email I sent last week])