\n<\/p>\n
Welcome to \u201cAsk a security trainer,\u201d the column where the Digital Security Training team at Freedom of the Press Foundation (FPF) answers your burning questions at the intersection of journalism and security. Let\u2019s jump right into this week\u2019s question.<\/p>\n
Dear DST,<\/i><\/p>\n
I was talking to my partner about getting some new shoes, and then I started receiving advertisements for new shoes. This really creeped me out, and once I started noticing it happening all the time. I have to know, is my phone really always listening to me?<\/i><\/p>\n
Signed,<\/i><\/p>\n
Mic Drop<\/i><\/p>\n
\u2013<\/p>\n
Dear Mic Drop, this is such a great question. The short answer is \u201cyes, but.\u201d If you use an AI assistant, your microphone is always listening for specific words (e.g., \u201cHey Siri!\u201d or \u201cOK Google!\u201d). But these magic words are only processed on the device. Only after you say them, will your device beam your requests (e.g., \u201cWhat\u2019s the weather like today?\u201d) to Apple or Google for processing. So technically, your phone is<\/i> always listening for an activation command, but it\u2019s unlikely what you say will be sent anywhere unless you explicitly ask for it to be sent.<\/p>\n
Of course, it\u2019s possible there are dodgy permissions on your apps or even malware on your device, but there\u2019s a lot we can do to prevent these possibilities. Chances are, then, the ads you\u2019re seeing are likely not related to your microphone but, instead, behavioral tracking software built into the apps you use every day.<\/p>\n
Let\u2019s unpack all of this, starting first with AI assistants. The AI assistant built into your smartphone has two listening modes: one is low-powered and functionally asleep until \u201cwoken up\u201d with a certain trigger word, and the other is wide-awake, conducts more advanced processing, and may send off requests to the service provider (in this case Apple<\/a> or Google<\/a>). When you activate the first mode with the trigger word, the second mode fulfills your request.<\/p>\n Your phone is probably not deriving targeted ads from your microphone \u2014 there are lots of other places to collect data. Many of the apps and websites you browse will closely track the things you open and click on, and sometimes sell this data to third parties. Those third parties may sell to yet more third parties and \u2026 you get the idea.<\/p>\n When companies begin aggregating these patterns, they will use them to try to predict buying habits when serving ads. These interest-based profiles are extremely valuable to marketers, who will serve ads that respond to your clicks. Often, their predictions are simply wrong, and we don\u2019t think twice about it. But when they\u2019re right, it\u2019s creepy how they seemed to know, almost like they were listening to our conversations.<\/p>\n Behind the scenes, most practical tracking just focuses on clicks. Examples of tracking tools useful for marketers to determine an identity online include cookies and advertising IDs. Some of this is hard to avoid, but it\u2019s easy to disable advertising IDs in your settings<\/a> to slow down some tracking on your mobile device. To dive deep on this topic, check out this resource from the Electronic Frontier Foundation<\/a>.<\/p>\n Finally, malware can enable your microphone without your permission, but malware is much more for running fraud schemes and \u2014 in rarer high-risk cases<\/a> \u2014 governments monitoring individuals. While state-sponsored surveillance like this is a real threat for some journalists, the most common risks remain behavioral tracking by marketing firms<\/a>.<\/p>\n To minimize potential risk associated with behavioral tracking and other forms of surveillance, we always recommend journalists remove unnecessary apps and regularly review app permissions. You can check which apps have access to your microphone \u2014 as well as your location, camera, photos, and so on \u2014 and decide whether or not you think they really need that access. For example, does your weather app<\/a> really<\/i> need access to your camera, microphone, and contacts?<\/p>\n In terms of malware, the best way to deal with potentially malicious software on your device is to:<\/p>\n 1) Only download apps from official distributors and reputable developers, and<\/p>\n 2) Simply keep your phone up to date! Software updates frequently contain security patches and fixes to other vulnerabilities.<\/p>\n If you\u2019re looking for more in-depth guidance on how to prevent your device from being surveilled, read our guide to securing your mobile device<\/a>.<\/p>\n Meanwhile, hope you enjoy the new shoes!<\/p>\n Securely yours,<\/p>\n Martin Shelton<\/p>\n<\/p><\/div>\n