The default retention period outweighs the settings page

What it is

Voice products almost always offer settings such as “auto-delete after three months” and “don’t save recordings.” What actually decides how long household audio lives is the default retention period that is never changed after unboxing. The settings page is for people who override the default. Most sessions happen on devices where that page has never been opened. The default outweighs the settings item not because the settings are poorly findable — even when they are findable, stickiness still sits on the factory rung. The claim is about the time-default for voice retention, not about disclosing scope, and not about history being viewable and deletable.

Why it happens

A default is read as a recommendation. Changing it requires finding the entry, predicting “will it work worse from now on,” and bearing consequences the rest of the household did not choose. Privacy settings for a smart speaker often do not live on the device at all, but deep in a companion app on another screen, which adds discovery cost. The real distribution of retention therefore hugs the factory value: indefinite, until manual delete, or many months. Marketing can say “you can delete anytime.” Anytime-delete is a capability; default retention is the policy. A capability shortens life only when exercised; a default is exercised every day. Household voice is peculiar in that the content was said in passing in a living room, not uploaded photo by photo — people are even less likely to prune an archive they do not remember creating. So the default period is not a neutral technical parameter. It decides, for the whole household, whether that talk is still there.

Studying it

Walk a fresh account: do not touch privacy settings, complete a wake and a few daily commands, and later see whether waveform and transcript remain and whether auto-delete is running. Recruit a second group and measure how many can find and change the retention period in a fixed time. Dependent measures are reach rate to the setting, and actual retention in the untouched group at 30 / 90 days — not how many options the page lists.

Ask separately “know you can delete” and “already changed to shorter.” The first is awareness; the second is the default being beaten. In the field, sample the actual value of the retention control in companion apps; the share still on the factory value is the weight of this mechanism.

Where it stops holding

Regulated recordings (finance calls, emergency) may have a statutory floor the settings item cannot go under. Enterprises lock retention by admin; members have no settings item, and the default is organizational policy. Hardware SKUs already sold as “do not save” have a short factory value, and stickiness then favors privacy. Billing all long retention to the default will miss the stretch that happens after a user explicitly turns on “use this to improve the model” — that is another choice, not the factory value.

Applying it

• Write factory retention as the shortest period that still delivers the features already promised (discard per session, or a short rolling window). Longer keep is an explicit opt-in.
• Put the retention control on a path the device itself can finish, not only on an account page on another screen. After a change, the speaker should say the new lifetime out loud.
• A version update must not silently lengthen a short retention already chosen. New devices get their own default review; “auto-delete exists in settings” is not a pass.
• How to check: unbox fresh, do not open the phone app, use it for a week. If waveform and transcript are still accumulating in the cloud by the month, the default period is the policy in force, and the settings item has not started work.

Related

• Same group: M4.10.1 Audio and transcripts are two data objects that need separate handling · M4.10.2 Deletion has to cover derived data
• Nearby: O1.04 Privacy by Default · M4.05 Retention of Voice Data · O1.05 Usability Dilemmas of Informed Consent
• Search terms: retention default · privacy by default · auto-delete