U.S. Senators Jeff Flake (R-AZ) and Chris Coons (D-Del.) have written to Amazon boss Jeff Bezos, demanding answers to 29 questions over privacy concerns relating to the company's Echo speaker range and its Alexa intelligent assistant.
Their concerns come after - and refer directly to - a recent incident in Portland, Oregon, where an Echo device mistakenly recorded a private conversation taking place in the same room, then sent it to a random contact of its owner.
- Amazon confirms Alexa recorded and shared a family's conversation
- Alexa records everything you say to her: How to listen to recordings and delete them
Written and sent to Bezos on June 15, the letter suggests Echo devices and the Alexa assistant "may share private consumer information that potentially puts Amazon users' privacy at risk."
Flake and Coons continue: "Recent events have demonstrated that it may take just a few words for Alexa to share with others personal information that the consumer would prefer - and would expect - to be kept private."
Flake and Coons serve respectively as the chairman and ranking member of the Judiciary Subcommittee on Privacy, Technology and the Law.
They then cite the Oregon incident, stating how the couple who own the Echo smart speaker were unaware that its microphone had switched on (which happens when the device hears "Alexa"), and a recording was sent to a random acquaintance of theirs.
The device did not malfunction, but simply misunderstood - on several consecutive occasions - what it had heard. That being, the "Alexa" wake word, followed by what it thought was a request to send a message, then what it thought was the contact's name. Alexa then sent the message after mistakenly hearing it being given permission to do so.
Asking Amazon to makes changes to how Alexa works, the senators added: "Without prompt and meaningful action, we expect that additional instances like the one summarized will happen again."
They went on: "The increasing popularity of in-home, internet-connected devices and voice-activated technologies raises questions about the types of data they collect, store, and share, and the degree to which consumers control their personal information. Companies, like Amazon, that offer services through these devices must address these concerns by prioritizing consumer privacy and protecting sensitive personal information."
They then ask Bezos 29 questions about how Echo speakers and the Alexa assistant work. They ask how many complaints Amazon has received from consumers "reporting that an Amazon Echo device has improperly interpreted a command."
The senators also ask how often Echo devices send voice data to Amazon's servers, and how long it is stored for by Amazon. You can read the letter and its questions in full here.
For what it is worth, it is already known that Echo devices store everything they hear on Amazon's server until the user deletes each recording. These can be listened to at any time through the Alexa smartphone app, where they are listed in reverse-chronological order. However, Amazon claims that deleting these will limit Alexa's ability to understand you more accurately in the future.
The company states: "When you use an Alexa device, we keep the voice recordings associated with your account to improve the accuracy of the results provided to you and to improve our services." Amazon also warns that deleting the recordings "may degrade your experience using the device."
Regarding the Oregon incident, Amazon said: "Echo woke up due to a word in background conversation sounding like "Alexa. Then, the subsequent conversation was heard as a 'send message' request. At which point, Alexa said out loud 'To whom?' At which point, the background conversation was interpreted as a name in the customers contact list. Alexa then asked out loud, '[contact name], right?' Alexa then interpreted background conversation as 'right'."
Check out The GearBrain, our smart home compatibility checker to see the other compatible products that work with Amazon Alexa.