The argument about whether these devices record everything misses the more consequential point: the traffic they generate when working exactly as described already describes your household in detail. What leaves, what it reveals, and the questions that separate a device you can live with from one you cannot.
The wrong argument
The public argument is about whether these devices secretly record. It is the wrong argument, and it is weak ground besides, because it requires an allegation nobody in the conversation can substantiate.
So grant the generous version completely. Assume the device does exactly what its maker says: it listens locally for a wake word, transmits only after hearing one, and discards the rest.
Everything below follows from that assumption. No hidden feature is required, and that is what makes it worth saying.
What leaves when nothing is wrong
A connection that stays alive, which means regular traffic confirming the device is reachable.
A wake event whenever the word is heard, carrying a timestamp and the identity of the device that heard it.
The command itself, and its transcript, processed somewhere that is not your house.
State changes for everything connected to it — lights, locks, thermostats — each generating its own small message.
And routine checks for firmware and configuration, which are the mechanism by which the device stays correct and also the mechanism by which it changes.
That list is the normal operation of a well-behaved product.
What that alone reveals
The payload matters less than the shape.
First interaction and last interaction, daily, describe when the household wakes and sleeps, with better reliability than most people would volunteer.
Gaps describe absence. A gap of a day is an evening out. A gap of nine days in August is a holiday, and the pattern of the days either side says whether it was planned.
Which devices respond, and how often, sketches the layout of the house and who occupies which part of it.
And silence is not the absence of information. A room that has answered nothing for a week has said something specific.
None of that requires a recording. It requires only timestamps, which are the one thing a connected device cannot avoid producing.
The third parties you did not choose
The maker is one relationship. Voice processing may be another company. Analytics is often a third. Advertising identifiers, where present, are a fourth. Every integration you enabled for convenience — the calendar, the shopping list, the music account — is another.
Each was authorised with one tap, during setup, on a day you were trying to get a device working. None of them is visible afterwards, and there is no screen that lists them together.
The update channel is the real question
A device that updates itself is a device whose behaviour was not fixed at purchase. Whatever review you read described a version that is no longer running.
This is the same structure as browser extensions and mobile applications, and it is more consequential here, because the object has a microphone, sits in a bedroom, and cannot be inspected. You cannot read its code, watch its traffic without effort, or open it and see what changed.
The trust is not given once at purchase. It is given continuously, by default, for as long as the device is plugged in.
The questions worth asking before buying
Does it work at all without a cloud account? If not, it is a subscription in the shape of an object.
Does it work on the local network with the internet disconnected? This separates a device that uses the cloud from one that is the cloud's terminal.
Can you observe its traffic? Not easily, for most people — but whether it is possible at all distinguishes a product that expects scrutiny from one that assumes none.
What happens when the manufacturer stops supporting it? A device that degrades to local function is an appliance. One that stops entirely was a rental.
Is the microphone disconnect physical or software? A switch that cuts power cannot be undone by an update. A button that sets a flag can.
What is reasonable
Not abstinence. These things are genuinely useful, and a piece that ends with do not own one has not helped anybody who already owns four.
Put them on a separate network if the router allows it, so a compromised device reaches the internet and not your files. Prefer ones that still work locally. Decline integrations you will not actually use, since each is permanent in practice. And recognise that convenience bought with a permanent connection is a recurring payment, not a purchase.
Close
The useful question is not whether it is listening. It is what it says about you when it is behaving perfectly — and that answer is available without assuming anybody is lying.