
Product features that 'just work' come at a cost: your privacy. The data collected by these devices is more valuable than you might think.
I build the 'convenience' features you're told to be grateful for, and I want to tell you what they actually are. Every time a product manager says a feature should 'just work,' what they mean is: it should work without the user ever being asked. No prompt, no choice, no friction. That sounds like good design. In practice, it is the exact mechanism by which your data leaves your house. Friction is where consent used to live. We removed the friction, and consent went with it.
I've sat in the meetings. Nobody twirls a mustache. The location permission that 'improves recommendations,' the always-on mic that 'makes wake-word detection faster,' the telemetry that 'helps us improve' — each one is defensible in isolation, and each one ships your life to a server you'll never see. The sum is a device that knows more about your week than your partner does, and a company that treats that knowledge as an asset on a balance sheet.
Here's the part that should bother you: none of it is necessary. The models that recognize your voice, your face, your habits are now small enough to run on the thing in your hand. The only reason they run in the cloud is that the cloud is where the data can be kept, mined, and sold. 'On-device' isn't a weaker version of the smart assistant. It's the same assistant with the surveillance removed. The feature set is identical. The business model is not.
So when a company tells you privacy and convenience are a trade-off, understand what's happening: they are describing their revenue model, not a law of physics. The trade-off is a choice they made for you. You can make a different one. Throw the always-listening puck that answers to someone else in the trash. Keep the one that answers to you.
You can make a different one. Throw the always-listening puck that answers to someone else in the trash. Keep the one that answers to you.