Skip to main content
NOPE
Medium reported severity Lawsuit Settled

Whistleblower says accidental Siri activations recorded private conversations heard by Apple contract graders; Apple apologised and later settled class suit

On 26 July 2019 the Guardian reported that contractors grading a small share of Siri recordings for Apple regularly heard confidential information. Its anonymous source, a contractor, said Siri was often activated by mistake, for example by the sound of a zip, and that these accidental activations captured private discussions between doctors and patients, business deals, apparently criminal dealings and sexual encounters, with location, contact details and app data attached. Apple told the Guardian that requests were not linked to users' Apple IDs and that less than 1% of daily activations were graded. On 28 August 2019 Apple apologised, said it had suspended human grading, and said audio would no longer be retained by default, grading would become opt-in and recordings found to be inadvertent triggers would be deleted. Device owners' class action, Lopez v. Apple in the federal court in Oakland, alleged that Apple recorded private conversations after unintended Siri activations and disclosed them to third parties. Apple agreed to pay $95 million while denying wrongdoing, and co-class counsel say the judge granted final approval on 16 October 2025.

AI system
Siri
Apple
Occurred
2019
Reported
26 July 2019
Event location
Unknown
What the AI did
Received personal information about the person
Reported harm
Other Material Harm
Whose AI use
Their own AI use · AI role unknown
Setting
Privacy · Everyday life · Health
Evidence
AI involvement supported · Causal attribution supported · 4 sources
8 claims: 1 documented, 1 corroborated, 6 reported. 4 open questions
People reported harmed
Not reliably quantifiable from the sources

AI system as recorded: Siri, Apple's voice assistant on iPhone, Apple Watch and HomePod, with wake-word ("Hey Siri") detection and raise-to-speak activation; a small share of its audio recordings was passed to contract graders

What Happened

The recordings. The Guardian reported on 26 July 2019 that a small proportion of Siri recordings were passed to contractors around the world, who graded them on factors including whether the activation was deliberate or accidental. Its source, a contractor who asked to remain anonymous, said accidental activations picked up extremely sensitive personal information. According to the contractor, Siri often heard the sound of a zip as its trigger, an Apple Watch raised and then hearing speech activated Siri automatically, and accidental triggers on the watch were very frequent, with some snippets 30 seconds long.

What graders heard. The contractor described countless recordings of private discussions between doctors and patients, business deals, seemingly criminal dealings and sexual encounters, accompanied by user data showing location, contact details and app data. The contractor said staff were encouraged to report accidental activations only as a technical problem, with no procedure for sensitive recordings, and that it would not be hard to identify the people heard. Apple told the Guardian that user requests were not associated with the user's Apple ID, that reviewers were bound by confidentiality requirements and that less than 1% of daily Siri activations were graded.

Apple's response. On 28 August 2019 Apple said customers had been concerned by reports of people listening to Siri audio as part of grading, that it had immediately suspended human grading, and that "we haven't been fully living up to our high ideals, and for that we apologize." It said it would no longer retain audio recordings by default, would make audio grading opt-in, would let only Apple employees listen to opted-in samples and would work to delete recordings determined to be inadvertent triggers.

The lawsuit. In Lopez et al v. Apple Inc., device owners alleged that Apple routinely recorded their private conversations after they activated Siri unintentionally and disclosed them to third parties such as advertisers. Reuters reports that two plaintiffs said their mentions of sneakers and a restaurant chain triggered ads for those products and that another said he got ads for a surgical treatment after discussing it with his doctor. These are allegations. Apple agreed to pay $95 million and denied wrongdoing. Co-class counsel say the court granted final approval on 16 October 2025.

Reported harm

A Guardian contractor source says accidental Siri activations recorded private conversations, including doctor-patient talk, that contract graders heard; Apple apologised, and settled a class suit for $95 million (loss of privacy).

Outcome

Resolved

Apple said on 28 August 2019 that it had suspended human grading of Siri requests and apologised, and said that by default it would no longer retain audio recordings, that users could opt in to having audio samples used, that only Apple employees would listen to opted-in samples, and that it would work to delete recordings determined to be inadvertent triggers. In Lopez et al v. Apple Inc. (N.D. Cal., No. 4:19-cv-04577) Apple agreed to pay $95 million in cash to settle the class action, with a class period from 17 September 2014 to 31 December 2024 and up to $20 per Siri-enabled device, and denied wrongdoing, according to Reuters. Co-class counsel Lowey Dannenberg say Judge Jeffrey S. White granted final approval on 16 October 2025.

What remains unknown

  • How many people were recorded by accidental activations or heard by graders.
  • Whether any recorded person was identified or harmed beyond the capture and listening described.
  • Whether the plaintiffs' advert allegations were ever substantiated; Apple denied wrongdoing.
  • The exact final-approval date in the court record (counsel gives 16 October 2025; the order was not read).

What the evidence supports

AI involvement: supported. Siri's own wake-word and raise-to-speak detection activated by mistake: the Guardian's contractor source says the sound of a zip was often heard as the trigger and accidental triggers on the Apple Watch were very frequent, and Apple undertook to delete recordings determined to be inadvertent triggers. The audio Siri captured on those activations was sent to Apple and a share was passed to contract graders, who, according to the contractor, heard doctor-patient discussions, business deals and sexual encounters with location and contact data attached. That capture into the assistant and disclosure to graders without the speakers knowing is the privacy harm recorded here; the plaintiffs' further claim that recordings led to targeted adverts is an allegation that Apple denied in settling.

8 claims: 1 documented, 1 corroborated, 6 reported. What the statuses mean

Corroborated A small proportion of Siri recordings was passed to contractors who graded them.

Causal attribution. The Guardian's report and Apple's own statement both describe human grading of Siri audio.

  • theguardian.com(opens in new tab) supports · English
    'a small proportion of Siri recordings are passed on to contractors working for the company around the world. They are tasked with grading the responses on a variety of factors, including whether the activation of the voice assistant was deliberate or accidental'
  • apple.com(opens in new tab) supports · English
    'part of our Siri quality evaluation process — which we call grading'
Reported Siri sometimes activated without being deliberately invoked and recorded audio that reached Apple; according to the contractor, the sound of a zip was often heard as a trigger and accidental triggers on the Apple Watch were very frequent.

Causal attribution. The trigger examples are the contractor's account; Apple's undertaking to delete inadvertent-trigger recordings confirms that such recordings were held, without giving their frequency.

  • theguardian.com(opens in new tab) supports · English
    'Siri can be accidentally activated when it mistakenly hears its “wake word”, the phrase “hey Siri”.'; '“The sound of a zip, Siri often hears as a trigger,” the contractor said.'; '“The regularity of accidental triggers on the watch is incredibly high,” they said.'
  • apple.com(opens in new tab) supports · English
    'Our team will work to delete any recording which is determined to be an inadvertent trigger of Siri.'
Reported According to the contractor, recordings from accidental activations included private discussions between doctors and patients, business deals, apparently criminal dealings and sexual encounters, accompanied by location, contact details and app data.

Causal attribution. A single anonymous contractor's account, relayed by the Guardian.

  • theguardian.com(opens in new tab) supports · English
    'There have been countless instances of recordings featuring private discussions between doctors and patients, business deals, seemingly criminal dealings, sexual encounters and so on. These recordings are accompanied by user data showing location, contact details, and app data.'; 'Accidental activations led to the receipt of the most sensitive data that was sent to Apple.'
Reported Apple told the Guardian that Siri requests were not associated with the user's Apple ID and that less than 1% of daily Siri activations were used for grading.

Causal attribution. Apple's statement to the Guardian; context and counterevidence on identifiability and scale.

  • theguardian.com(opens in new tab) supports · English
    'User requests are not associated with the user’s Apple ID.'; 'a very small random subset, less than 1% of daily Siri activations, are used for grading'
Documented Apple said it had suspended human grading of Siri requests, apologised for not fully living up to its ideals, and said it would by default no longer retain audio recordings, would make audio grading opt-in and would work to delete recordings determined to be inadvertent triggers.

Causal attribution. Apple's own published statement establishes what Apple said and undertook.

  • apple.com(opens in new tab) supports · English
    'immediately suspended human grading of Siri requests'; 'we realize we haven’t been fully living up to our high ideals, and for that we apologize.'; 'by default, we will no longer retain audio recordings of Siri interactions.'; 'users will be able to opt in to help Siri improve by learning from the audio samples of their requests.'
Reported In Lopez et al v. Apple Inc., device owners alleged that Apple routinely recorded their private conversations after they activated Siri unintentionally and disclosed them to third parties such as advertisers; two plaintiffs said mentions of products triggered ads for them, and another said he got ads for a surgical treatment after discussing it with his doctor.

Causal attribution. Plaintiffs' allegations as reported by Reuters; not established.

  • finance.yahoo.com(opens in new tab) supports · English
    'Mobile device owners complained that Apple routinely recorded their private conversations after they activated Siri unintentionally, and disclosed these conversations to third parties such as advertisers.'; 'Two plaintiffs said their mentions of Air Jordan sneakers and Olive Garden restaurants triggered ads for those products. Another said he got ads for a brand name surgical treatment after discussing it, he thought privately, with his doctor.'
Reported Apple agreed to pay $95 million in cash to settle the class action, covering a class period from 17 September 2014 to 31 December 2024 with up to $20 per Siri-enabled device, and denied wrongdoing.

Causal attribution. Reuters' report of the preliminary settlement filing; the filing itself was not read.

  • finance.yahoo.com(opens in new tab) supports · English
    'agreed to pay $95 million in cash to settle a proposed class action lawsuit'; 'The class period runs from Sept. 17, 2014 to Dec. 31, 2024.'; 'may receive up to $20 per Siri-enabled device'; 'Apple denied wrongdoing in agreeing to settle.'
Reported Co-class counsel say Judge Jeffrey S. White granted final approval of the $95 million settlement on 16 October 2025.

Causal attribution. Plaintiffs' counsel's statement; the court order was not read, and other summaries give September or 14 October 2025 dates.

  • lowey.com(opens in new tab) supports · English
    'U.S. District Judge Jeffrey S. White granted final approval on October 16, 2025, of Plaintiffs’ $95 million settlement with Apple'

Sources

4 sources inspected. Sources that repeat one account do not corroborate each other.

How the sources were read, and where the events happened

Read in English on 2026-10-29 (theguardian.com, HTTP 200). No translation was needed; the research agent (an AI) read the text directly. Applies to s1.

Read in English on 2026-10-29 (apple.com, HTTP 200); the page gives its date as 28 August 2019. No translation was needed. Applies to s2.

Read in English on 2026-10-29 (finance.yahoo.com syndication of the Reuters report, HTTP 200; reuters.com returned 401). No translation was needed. Applies to s3.

Read in English on 2026-10-29 (lowey.com, HTTP 200). The post carries no publication date of its own; the court order itself was not read. No translation was needed. Applies to s4.

Event countries: Unknown. Affected-person countries: Unknown. Court countries: United States.

The class action was in the US District Court for the Northern District of California (Oakland), per Reuters and co-class counsel. The Guardian says the contractors worked around the world and does not say where the recorded people were; no event or affected-person country is stated.

Reviewed for publication 2026-10-29: Published as private conversations captured into an AI voice assistant without the speakers' knowledge: Siri's wake-word detection activated by mistake and graders heard the recordings, according to the Guardian's contractor source, and Apple acknowledged inadvertent-trigger recordings, apologised and changed its grading. The class action allegations are attributed to the plaintiffs; Apple settled for $95 million while denying wrongdoing.

People described

People whose conversations were recorded when Siri activated by mistake and whose recordings were heard by contract graders, including, according to the contractor, patients speaking with doctors and people in business and intimate conversations; their number is not reported. Siri device owners also brought a class action alleging unauthorised recording and disclosure.

People reported harmed in this case

Not reliably quantifiable from the sources

The Guardian's contractor source describes "countless instances" of recordings of private conversations from accidental Siri activations but gives no number of people heard. Reuters reports that class members are estimated in the tens of millions; that is the size of the settlement class of device owners, not a count of people whose conversations were recorded or heard. No reliable count exists, so the count is unquantified with zero placeholders.

Counted once within this case. The same person may appear in other cases. This count does not establish AI causation.

Tags

#voice-assistant#false-activation#human-review#privacy#class-action#settlement

Cite this case

Compiled per our published methodology: verification statuses, sourcing standards, and corrections process.

APA

NOPE. (2026). Whistleblower says accidental Siri activations recorded private conversations heard by Apple contract graders; Apple apologised and later settled class suit. AI incidents. https://nope.net/incidents/2019-apple-siri-accidental-activations-recorded-private-conversations-heard-by-contractors-95-million-settlement

BibTeX

@misc{2019_apple_siri_accidental_activations_recorded_private_conversations_heard_by_contractors_95_million_settlement,
  title = {Whistleblower says accidental Siri activations recorded private conversations heard by Apple contract graders; Apple apologised and later settled class suit},
  author = {NOPE},
  year = {2026},
  howpublished = {AI incidents},
  url = {https://nope.net/incidents/2019-apple-siri-accidental-activations-recorded-private-conversations-heard-by-contractors-95-million-settlement}
}

Related cases

Low Meta AI (reported)

Ray-Ban Meta glasses owner says Meta AI stored recordings and transcripts of conversations captured without the wake word; Meta says the issue is resolved

In a Reddit post on 13 October 2026, an owner of Ray-Ban Meta smart glasses says the glasses captured conversations they were having with another person although they had not said the wake word "Hey Meta" and the setting for responding without it was turned off. The owner says the Meta AI app saved audio recordings and text transcripts of these conversations in their history, that Meta AI never answered, and that they saw the same behaviour on three pairs (second and third generation) after a recent firmware update. A screenshot attached to the post shows the app's voice activity log with stored entries dated 12 October. The owner says Meta Support advised turning off microphone and camera permissions, Wear Detection and automatic updates and deleting voice history, and later replied that recording continued with everything turned off. On 16 October 2026, after Meta's statement, the owner replied that a new update had been pushed to their glasses and the issue was unchanged. A Meta spokesperson told Android Authority, as relayed by Futurism, Ars Technica and Mashable, that the issue had been resolved. Ars Technica reports that Meta has not said what caused the recordings or how many glasses were affected, and that Android Authority could not reproduce the problem before Meta's statement. The owner says they cannot establish whether the recordings were sent to Meta's servers. On 19 October 2026 a California buyer filed a proposed class action against Meta in federal court (Subia v. Meta Platforms) alleging that Meta AI glasses recorded his conversations without the wake phrase, in violation of California's wiretapping law; the complaint quotes reporting of this owner's three-pairs account. Its allegations are unproven.

Low Character.AI age verification

First-person forum account: a long-time Character.AI user who says they are an adult says the app's AI age verification, run through Persona, kept judging them a minor despite ID photos, answered more than five support tickets only with automated replies, and locked them out of their account

In a public post to r/CharacterAI at 21:47 UTC on 2 October 2026, a person who describes themselves as a veteran user of the Character.AI app says they returned about a month earlier to verify their age, and that the AI verification by Persona assumed they were a minor although they are not. They say they sent photos of their ID, tried desktop and different lighting, and kept getting an error message; that more than five support tickets asking for manual verification drew only replies from automated bots; and that the age verification system has now locked them out of their account. In a reply they say the system should identify people properly instead of "locking it out on permenent basis". A commenter says the same check called them underage. The account is uncorroborated, and Character.AI's and Persona's handling is described only by the poster.

Medium Unidentified OpenAI generative AI service (reported)

An insurer says a health-guidance contractor's employee entered data on 19,996 people, including disease information, into an unauthorised generative AI service

Notices from RIZAP's client insurers say that on 20 August 2026 it emerged that a staff member of RIZAP, the company they contract for specific health guidance, had entered data containing members' personal information into an external generative AI service that RIZAP had not permitted for work. The National Civil Engineering and Construction National Health Insurance Association (Doken Kokuho) puts the whole data set at 19,996 people, 1,167 of them its own members, and says the service was not under a corporate contract and that the matter was found when the employee noticed the transmission and reported it. A local-government employees' mutual aid association counts 726 of its members across 14 branches, and the IHI group health insurance society 210, according to a security news site that reads these as subsets of the 19,996. The data included membership numbers, email addresses, names, dates of birth, sex, some addresses and phone numbers, the type of health guidance and, for members with them, high blood pressure, diabetes or dyslipidaemia. The IHI society's notice, as relayed, names OpenAI as the provider and says OpenAI answered on 1 September that the data had not been used for model training. RIZAP's release, as described in an ITmedia column, says no third party other than the service operator could have viewed the data. Doken Kokuho says RIZAP confirmed to it that no third party viewed or used the information through the service; whether the provider's staff could view it was still being checked when the mutual aid association and the IHI society published.

Medium ChatGPT

Texas health plan says an employee uploaded a file of members' personal and prescription data to ChatGPT from a home network, against its policy

Community First Health Plans, a nonprofit health plan in San Antonio, Texas, said in a 29 June 2026 release that on the evening of 29 April 2026 one of its employees uploaded a file containing personal information of some members to ChatGPT from a home computer network, circumventing the plan's firewall safeguards and violating its policy. The plan says it does not use ChatGPT and that its systems detected the violation and alerted its IT department. According to the release, the file may have included members' names, addresses, dates of birth, member identification numbers and prescription drug information. The next morning the plan revoked the employee's access, directed and verified deletion of the data from the employee's ChatGPT account, asked OpenAI to delete any related data, and ended its relationship with the employee. It notified affected members and federal and state agencies, offered 12 months of identity monitoring and says it is not aware of any misuse. The release gives no number of affected members.

If you or someone you know is struggling, free and confidential support is available. Find a helpline near you at Signpost.

Back to all incidents