Tell the FTC: Stop tech companies from selling kids’ data
Alexa records everything you say to it, and keeps that data indefinitely.
Sign the petition
Director, Don't Sell My Data Campaign, U.S. PIRG Education Fund
Don't Sell My Data campaign intern
Don't Sell My Data campaign intern
Amazon has officially sold over 500 million Alexa-enabled devices globally, including more than 71 million Amazon smart speakers in the United States alone.
If you’re one of the millions with an Alexa in your home, or are thinking about joining them, it’s worth knowing how much data Alexa collects, and what Amazon does with that information. Because it’s a lot.
Alexa is the name of Amazon’s virtual assistant. It’s most associated with the Amazon Echo or Dot smart speakers, but Amazon sells a number of Alexa-enabled devices including thermostats, televisions and even bicycle helmets. These voice-activated devices allow you to do web searches, make purchases, stream music, ask about the weather or call up a friend by using the prompt “Hey Alexa”.
Yes, Alexa is an always-on listening device. It isn’t always recording every word you say near it, but it is listening for a wake word (usually “Alexa”, but you can pick your own). When it hears the wake word, Alexa then starts recording your voice.
Smart speakers can wake up on accident when they hear something that sounds like its assigned wake word. Some of Alexa’s false wake words for “Alexa” have included “unacceptable,” and “I messed up”.
With an Alexa in your house, it’s collecting a lot of information about you.
Alexa collects and keeps your voice recordings, while your Amazon account gathers a lot of other personal info. That can include your geolocation, contacts and everything you do on an Amazon product such as your Kindle, Prime or Ring cameras. It can also collect your children’s information.
Overall, Amazon collects a lot of your data, allows other third parties to collect your data, and grants companies access to your data on a pretty massive scale. Let’s break it down.
Anytime you talk to Alexa, Amazon records what you say and sends the recording of your voice to its servers. Amazon then processes your recording, turning into a text transcript, and prompts Alexa to respond accordingly.
That mostly makes sense for how Alexa works. What makes less sense is that Amazon retains both your voice recording and the text transcript of your Alexa interactions – indefinitely. Keeping your data forever isn’t necessary for Alexa to work – it has all the same features even if you set it to delete your recordings every 3 months. In recent years the company has fought legislation that would require it to notify customers that it keeps voice recordings, or get explicit consent to do so.
Report ●
You can, thankfully, ask Amazon to delete your recordings and transcripts.
Amazon knows everything you say to Alexa, and keeps that data indefinitely – which can be a lot of information.
If you use Alexa for voice-activated shopping, it knows what you’re buying and when. Text a friend using Alexa, Amazon knows the content of your message, and also has access to your contacts. Ask Alexa to play music, it knows what genres you like, maybe what you’re up to (if you request your “workout” playlist) and can probably take a good guess at what mood you’re in (if you’re listening to a sad song on repeat). Ask it to turn your bedroom lights off, it knows when you’re going to bed. Ask it to verify the timing of your doctor’s appointment, odds are you’ve given access to your calendar. Ask it for recipes to help you lose weight, find a divorce lawyer, or for side effects of a prescription, and at the end of the day, Amazon can learn a lot. And it will hold onto that information until you explicitly tell it to delete it.
The weird thing here – besides the fact Amazon wants to hold onto this info forever – is that if you’re using an Alexa Skill (Amazon’s version of an app), it’s very possible that the third-party developer of that Skill is also receiving text transcripts of your Alexa conversations (and possibly other data).
Also extremely worth knowing: even if you request Amazon delete all your text transcripts, that does not delete those that third-party Skills developers have. You have to go to each one and request deletion one at a time.
If you have children and an Alexa in your home, it’s almost certain that Amazon is recording your child.
If you use an Alexa product meant for children under 13 (such as the Echo Dot Kids Edition or an Amazon Kids profile), you have to consent to Amazon collecting data about your child as a part of using all of that service’s features. This can include info such as your child’s voice recordings, as well as location, birthdate, photos and contact information.
Alternatively if you have an Alexa in your home and use it without a kid’s account, Amazon is still likely gathering your child’s voice recordings, because it gathers everyone’s voice data when they use – or are near someone using – Alexa.
Plus if your child uses an Alexa Skill, the third-party developer may receive full text transcripts of your child’s interactions with the Skill.
All of that raises red flags. Tech that talks with kids can open the door to excessive data collection. A child may come to view Alexa or a Skill that, say, brings a stuffed toy to life, as a friend and share more personal details, not realizing it’s a company on the other side that’s doing the listening and talking.
Then there’s the fact recently Amazon has had a bit of a bumpy track record with children’s privacy. In 2023, the FTC found that Amazon had ignored parent’s requests to delete their child’s data, and instead kept children’s’ voice recordings and location data for years.
If you use Alexa, Prime, Kindle or other Amazon service, Amazon is using your profile to collect data about you. That can include your credit card info, precise geolocation, what and when you’re streaming, your search history, your photos, contacts, age, and may infer lots of other info, such as your religion (if you listen to the Quran on audiobook), your family status (if you create a wedding or baby registry, or set up a child’s profile), or your gender or race (if you participate in a survey from a 3rd party that works with Amazon, it can get those results too).
Amazon also gets user data from the targeted advertising industry. Amazon may collect data about what you do on other websites using cookies and other tracking technologies. It can also receive data such as demographic information from other sites and companies.
Then there’s Ring cameras which collect video and audio recordings and live streams. Amazon can get information about you from Facebook, too, if you link your Ring camera account to your social media account so you can share videos.
Then there’s also the company’s foray into becoming a health provider with Amazon Clinic and One Medical that you can link to your Prime membership. (Which raises too many privacy questions for us to get into here.)
There are two main things.
It all depends on what you’re comfortable with. We’d argue there’s a couple reasons to be concerned.
If you have an Alexa, the good news is Amazon does give you some tools to help minimize data collection. Let’s walk through the options here.
The #1 thing you can do to boost your privacy and security is deleting your existing voice data and text transcripts. There are a couple ways to do this.
According to Amazon, deleting your voice recordings will also delete your text transcripts, making this the most efficient way to take more control of your data.
You can set Alexa to delete what you’ve said with a voice command, but you need to activate this feature. (It’d be better if Amazon made that possible without jumping through extra hoops. But we digress.)
For max protection, we recommend setting Alexa to delete your recordings automatically as opposed to having to continually ask it.
If you don’t want Alexa to automatically delete your recordings in the future, you can still go delete some or all of your past voice history.
Note that after deleting your data through any of these mechanisms, Amazon may require you to authenticate your request in your email inbox or by other means. In 2022, Amazon received 3,200,772 data deletion requests, and fulfilled just 51% of them. According to the company, this was in part because people did not finish verifying the request.
Amazon has human reviewers who can access your voice recordings as a part of training the Alexa algorithm. You can opt-out of this use of your data.
You can take stock of what data Skills are collecting on you and revoke permissions. We highly recommend limiting as many Skills gathering as much of your data as possible. These third parties are likely going to be riskier with your data and a lot less under Amazon’s control.
Mastercard sells transaction data -- like where cardholders shop, when and how much they spend -- to third parties.
Sign the petition
R.J. focuses on data privacy issues and the commercialization of personal data in the digital age. Her work ranges from consumer harms like scams and data breaches, to manipulative targeted advertising, to keeping kids safe online. In her work at Frontier Group, she has authored research reports on government transparency, predatory auto lending and consumer debt. Her work has appeared in WIRED magazine, CBS Mornings and USA Today, among other outlets. When she’s not protecting the public interest, she is an avid reader, fiction writer and birder.
Don't Sell My Data campaign intern
Don't Sell My Data campaign intern