Privacy Attitudes of Smart Speaker Users

Open access

Abstract

As devices with always-on microphones located in people’s homes, smart speakers have significant privacy implications. We surveyed smart speaker owners about their beliefs, attitudes, and concerns about the recordings that are made and shared by their devices. To ground participants’ responses in concrete interactions, rather than collecting their opinions abstractly, we framed our survey around randomly selected recordings of saved interactions with their devices. We surveyed 116 owners of Amazon and Google smart speakers and found that almost half did not know that their recordings were being permanently stored and that they could review them; only a quarter reported reviewing interactions, and very few had ever deleted any. While participants did not consider their own recordings especially sensitive, they were more protective of others’ recordings (such as children and guests) and were strongly opposed to use of their data by third parties or for advertising. They also considered permanent retention, the status quo, unsatisfactory. Based on our findings, we make recommendations for more agreeable data retention policies and future privacy controls.

If the inline PDF is not rendering correctly, you can download the PDF file here.

  • [1] Abrar Al-Heeti. Echo effect: US smart speaker ownership nearly doubles in a year survey says. CNET News February 2019.

  • [2] Amazon. Amazon.com help: Alexa and Alexa device FAQs. https://www.amazon.com/gp/help/customer/display.html?nodeId=201602230.

  • [3] Noah Apthorpe Yan Shvartzshnaider Arunesh Mathur Dillon Reisman and Nick Feamster. Discovering Smart Home Internet of Things Privacy Norms Using Contextual Integrity. Proc. ACM Interact. Mob. Wearable Ubiquitous Technol. 2(2):59:1–59:23 July 2018.

  • [4] Orlando Arias Jacob Wurm Khoa Hoang and Yier Jin. Privacy and security in internet of things and wearable devices. IEEE Transactions on Multi-Scale Computing Systems 1(2):99–109 2015.

  • [5] Lujo Bauer Lorrie Faith Cranor Saranga Komanduri Michelle L Mazurek Michael K Reiter Manya Sleeper and Blase Ur. The post anachronism: The temporal dimension of Facebook privacy. In Proceedings of the 12th ACM workshop on privacy in the electronic society pages 1–12. ACM 2013.

  • [6] Frank Bentley Chris Luvogt Max Silverman Rushani Wirasinghe Brooke White and Danielle Lottridge. Understanding the Long-Term Use of Smart Speaker Assistants. Proc. ACM Interact. Mob. Wearable Ubiquitous Technol. 2(3):91:1–91:24 September 2018.

  • [7] Dieter Bohn. Amazon says 100 million Alexa devices have been sold. The Verge January 2019.

  • [8] Phoebe Braithwaite. Smart home tech is being turned into a tool for domestic abuse. Wired July 2018.

  • [9] Joseph Bugeja Andreas Jacobsson and Paul Davidsson. On privacy and security challenges in smart connected homes. In 2016 European Intelligence and Security Informatics Conference (EISIC) pages 172–175. IEEE 2016.

  • [10] Varun Chandrasekaran Kassem Fawaz Bilge Mutlu and Suman Banerjee. Characterizing privacy perceptions of voice assistants: A technology probe study. arXiv preprint arXiv:1812.00263 2018.

  • [11] Eugene Cho. Hey Google Can I Ask You Something in Private? In Proceedings of the 2019 CHI Conference on Human Factors in Computing Systems CHI ’19 pages 258:1–258:9. ACM 2019.

  • [12] Paul Cutsinger. How to Improve Alexa Skill Discovery with Name-Free Interaction and More September 2018.

  • [13] Matt Day Giles Turner and Natalia Drozdiak. Amazon Workers Are Listening to What You Tell Alexa. Bloomberg April 2019.

  • [14] Tamara Denning Cynthia Matuszek Karl Koscher Joshua R. Smith and Tadayoshi Kohno. A Spotlight on Security and Privacy Risks with Future Household Robots: Attacks and Lessons. In Proceedings of the 11th International Conference on Ubiquitous Computing UbiComp ’09 pages 105–114. ACM 2009.

  • [15] Lisa Eadicicco. How to get Amazon’s Alexa to delete everything you’ve said to your Echo just by asking. Business Insider May 2019.

  • [16] Adrienne Porter Felt Serge Egelman and David Wagner. I’ve got 99 problems but vibration ain’t one: a survey of smartphone users’ concerns. In Proceedings of the second ACM workshop on Security and privacy in smartphones and mobile devices SPSM ’12 pages 33–44 New York NY USA 2012. ACM.

  • [17] Earlence Fernandes Jaeyeon Jung and Atul Prakash. Security analysis of emerging smart home applications. In 2016 IEEE Symposium on Security and Privacy (SP) pages 636–654. IEEE 2016.

  • [18] Geoffrey A. Fowler. Alexa has been eavesdropping on you this whole time. The Washington Post May 2019.

  • [19] Gartner Inc. Gartner Says Worldwide Spending on VPA-Enabled Wireless Speakers Will Top $3.5 Billion by 2021 August 2017.

  • [20] Christine Geeng and Franziska Roesner. Who’s In Control?: Interactions In Multi-User Smart Homes. In Proceedings of the 2019 CHI Conference on Human Factors in Computing Systems CHI ’19 pages 268:1–268:13. ACM 2019.

  • [21] Makda Ghebreslassie. ’Stalked within your own home’: Woman says abusive ex used smart home technology against her. CBC News November 2018.

  • [22] Google. Data security & privacy on Google Home. https://support.google.com/googlehome/answer/7072285.

  • [23] Jorge Granjal Edmundo Monteiro and Jorge Sá Silva. Security for the internet of things: a survey of existing protocols and open research issues. IEEE Communications Surveys & Tutorials 17(3):1294–1312 2015.

  • [24] Jay Greene. Amazon adds delete commands for Alexa. The Washington Post May 2019.

  • [25] Mohammad Taha Khan Maria Hyun Chris Kanich and Blase Ur. Forgotten but not gone: Identifying the need for longitudinal data management in cloud storage. In Proceedings of the 2018 CHI Conference on Human Factors in Computing Systems page 543. ACM 2018.

  • [26] Lawrence L. Kupper and Kerry B. Hafner. On Assessing Interrater Agreement for Multiple Attribute Responses. Bio-metrics 45(3):957 September 1989.

  • [27] Christoffer Lambertsson. Expectations of Privacy in Voice Interaction–A Look at Voice Controlled Bank Transactions. Technical report 2017.

  • [28] R Larson and M Csikszentmihalyi. New directions for naturalistic methods in the behavioral sciences. The Experience Sampling Method H. Reis Ed. Jossey-Bass San Francisco pages 41–56 1983.

  • [29] Josephine Lau Benjamin Zimmerman and Florian Schaub. Alexa Are You Listening?: Privacy Perceptions Concerns and Privacy-seeking Behaviors with Smart Speakers. Proc. ACM Hum.-Comput. Interact. 2(CSCW):102:1–102:31 November 2018.

  • [30] Linda Lee JoongHwa Lee Serge Egelman and David Wagner. Information Disclosure Concerns in The Age of Wearable Computing. In Proceedings of the NDSS Workshop on Usable Security USEC ’16 2016.

  • [31] Sapna Maheshwari. Sharing Data for Deals? More Like Watching It Go With a Sigh. The New York Times page B1 December 2018.

  • [32] Nathan Malkin Julia Bernd Maritza Johnson and Serge Egelman. “What Can’t Data Be Used For?” Privacy Expectations about Smart TVs in the US. In Proceedings of the 3rd European Workshop on Usable Security 2018.

  • [33] Lydia Manikonda Aditya Deotale and Subbarao Kambhampati. What’s up with privacy?: User preferences and privacy concerns in intelligent personal assistants. In Proceedings of the 2018 AAAI/ACM Conference on AI Ethics and Society AIES ’18 pages 229–235 New York NY USA 2018. ACM.

  • [34] Sarah Mennicken and Elaine M. Huang. Hacking the Natural Habitat: An In-the-Wild Study of Smart Homes Their Development and the People Who Live in Them. In Judy Kay Paul Lukowicz Hideyuki Tokuda Patrick Olivier and Antonio Krüger editors Pervasive Computing pages 143–160. Springer Berlin Heidelberg 2012.

  • [35] M. Mondal J. Messias S. Ghosh K. Gummadi and A. Kate. Longitudinal Privacy Management in Social Media: The Need for Better Controls. IEEE Internet Computing pages 1–1 2018.

  • [36] David Monsees and Marlo McGriff. Introducing auto-delete controls for your Location History and activity data. https://www.blog.google/technology/safety-security/automatically-delete-data/ May 2019.

  • [37] Aarthi Easwara Moorthy. Voice activated personal assistant: Privacy concerns in the public space. PhD Thesis 2013.

  • [38] Aarthi Easwara Moorthy and Kim-Phuong L. Vu. Privacy Concerns for Use of Voice Activated Personal Assistant in the Public Space. International Journal of Human–Computer Interaction 31(4):307–335 2015.

  • [39] Pardis Emami Naeini Sruti Bhagavatula Hana Habib Martin Degeling Lujo Bauer Lorrie Faith Cranor and Norman Sadeh. Privacy Expectations and Preferences in an IoT World. In Thirteenth Symposium on Usable Privacy and Security (SOUPS 2017) pages 399–412. USENIX Association 2017.

  • [40] Helen Nissenbaum. Privacy as contextual integrity. Wash. L. Rev. 79:119 2004.

  • [41] Helen Nissenbaum. Privacy in context: Technology policy and the integrity of social life. Stanford University Press 2009.

  • [42] Antti Oulasvirta Aurora Pihlajamaa Jukka Perkiö Debarshi Ray Taneli Vähäkangas Tero Hasu Niklas Vainio and Petri Myllymäki. Long-term effects of ubiquitous surveillance in the home. In Proceedings of the 2012 ACM Conference on Ubiquitous Computing pages 41–50. ACM 2012.

  • [43] Robert W. Reeder Adrienne Porter Felt Sunny Consolvo Nathan Malkin Christopher Thompson and Serge Egelman. An Experience Sampling Study of User Reactions to Browser Warnings in the Field. In Proceedings of the 2018 CHI Conference on Human Factors in Computing Systems CHI ’18 pages 512:1–512:13. ACM 2018.

  • [44] Eyal Ronen Adi Shamir Achi-Or Weingarten and Colin O’Flynn. IoT goes nuclear: Creating a zigbee chain reaction. In 2017 IEEE Symposium on Security and Privacy (SP) pages 195–212. IEEE 2017.

  • [45] Hamza Shaban. An Amazon Echo recorded a family’s conversation then sent it to a random person in their contacts report says. The Washington Post May 2018.

  • [46] Statista. Global market share held by leading desktop internet browsers from January 2015 to December 2018. https://www.statista.com/statistics/544400/market-share-of-internet-browsers-desktop/.

  • [47] Alexander Tsesis. The right to erasure: Privacy data brokers and the indefinite retention of data. Wake Forest L. Rev. 49:433 2014.

  • [48] James Vlahos. Amazon Alexa and the search for the one perfect answer. Wired (March 2019) 2019.

  • [49] Eric Zeng Shrirang Mare and Franziska Roesner. End User Security and Privacy Concerns with Smart Homes. In Thirteenth Symposium on Usable Privacy and Security (SOUPS 2017) pages 65–80 Santa Clara CA 2017. USENIX Association.

  • [50] Serena Zheng Noah Apthorpe Marshini Chetty and Nick Feamster. User perceptions of smart home IoT privacy. Proc. ACM Hum.-Comput. Interact. 2(CSCW):200:1–200:20 November 2018.

Search
Journal information
Metrics
All Time Past Year Past 30 Days
Abstract Views 0 0 0
Full Text Views 154 154 90
PDF Downloads 80 80 34