Apple Siri Recording Settlement: Millions Paid for Unauthorized Eavesdropping

Apple agreed to a $95 million settlement after revelations that Siri recordings were reviewed by human contractors without user knowledge. Whistleblowers disclosed that contractors regularly heard sensitive conversations including medical discussions, drug deals, and intimate encounters triggered by accidental Siri activations. The recordings were tied to device identifiers that could link audio to specific users despite Apple claims of anonymization. Internal documents showed Apple retained Siri audio data for up to two years and shared recordings across teams for quality improvement without informing users. The settlement covered users from September 2014 through December 2024 who owned Siri-enabled devices. Apple subsequently reduced audio retention periods and added opt-in controls, but privacy advocates argued the changes came only after legal pressure and did not address the years of unauthorized collection.

The ramifications of this incident extend beyond the immediate data exposure. Privacy regulators in multiple jurisdictions have opened investigations, and affected individuals are organizing collective action to demand accountability and meaningful remediation. The case highlights systemic weaknesses in how organizations handle personal data and the gap between corporate privacy promises and operational reality.

For impacted individuals, immediate action is critical. Filing a data subject access request forces the company to disclose exactly what data they hold about you, providing the foundation for deletion requests, regulatory complaints, and potential legal action. Below, we outline the specific data types at risk and the concrete steps you can take to protect yourself.