← IoT Privacy Database

Amazon Echo / Alexa

Amazon.com, Inc. · Smart Speaker

Staff Reviewed — a person at DeSpy reviewed this rating.

7.1Surveillance
Index
Policy — what its policy permitsD
Evidence — what research provesF

Records voice audio and transcripts treated as biometric data by the FTC, and kept children's voice recordings indefinitely by default until a 2023 $25M COPPA settlement forced deletion practices.

Why this rating

Amazon's Alexa retained children's voice recordings and transcripts indefinitely by default even after parents requested deletion, resulting in a $25 million FTC/DOJ COPPA settlement — a substantiated and severe children's-privacy violation.

What it is

Manufacturer
Amazon.com, Inc.
Category
Smart Speaker
Model years
2014-present
Market status
Current
Companion app
Alexa

The evidence 6

Independent research, regulatory action, lawsuits and journalism about how this device handles personal data — the "what actually happens" axis. Each links to its source.

  1. Regulatory action · Federal Trade Commission / DOJ · 2023-05-31

    FTC and DOJ charged Amazon with violating COPPA by retaining children's Alexa voice recordings indefinitely even after parents asked for deletion, resulting in a $25 million penalty.

    Why it matters here: FTC/DOJ settlement is specifically about Alexa's retention of children's voice recordings.

  2. Regulatory action · Federal Trade Commission · 2023-05-31

    FTC staff blog detailing how Amazon retained children's voice recordings and transcripts collected through Alexa despite deletion requests.

    Why it matters here: FTC staff blog detailing the specific Alexa COPPA violations.

  3. Regulatory action · U.S. Department of Justice · 2023-05-31

    DOJ press release confirming Amazon's $25 million penalty and required changes to Alexa's handling of children's voice data.

    Why it matters here: DOJ press release confirming the $25M penalty and required Alexa changes.

  4. Regulatory action · Federal Trade Commission · 2023-05-31

    Official FTC case record for United States v. Amazon.com covering the Alexa children's-privacy violations.

    Why it matters here: Official FTC case filing record.

  5. Journalism · NPR · 2023-06-01

    NPR coverage combining the Ring privacy settlement with the concurrent Alexa children's-privacy settlement announced the same week.

    Why it matters here: NPR coverage combining the Alexa COPPA settlement with the concurrent Ring settlement.

  6. Journalism · Amazon (About Amazon) · 2023-05-31

    Amazon's own statement responding to and characterizing the FTC/DOJ Alexa children's-privacy settlement.

    Why it matters here: Amazon's own response to the settlement.

Are you the maker? Respond to this finding

Free. There is no paid or faster path, and nothing about a rating is for sale. Prove you control your company's domain with one DNS record; a person then reads your statement beside our finding and decides whether to publish it.

An email is encrypted at rest and opened only to answer you; it is erased 30 days after we resolve this (or 180 days if still open), and you can erase it sooner. Unproven filings are deleted after 14 days.

Think something here is wrong?

Evidence and research improve when people push back. Tell us what to re-check — a misattributed domain, an outdated classification, a claim about your own app — and a human will review it. Responses can take up to 30 days.

If you leave an email it is encrypted at rest and opened only to answer you — never shared, never used for anything else. It is erased 30 days after we resolve this (or 180 days if it is still open) without you asking, and you can erase it sooner at any time; either way your correction stays, anonymously. Leave it blank and your request is fully anonymous from the start (we store no IP address either way).

Descriptive, cited, not legal advice; ratings are versioned and corrections create a new version. Data from the IoT Info Grabber DB research project, CC BY-SA 4.0.

← Back to the IoT Privacy Database