Apple Watch Siri Recap privacy: what the watch hears, sends, and keeps

The Morse teamPublished November 5, 20268 min read

Apple Watch Siri Recap privacy is strong toward Apple and thin toward the people you talk to. Siri Recap and Live Rewind entered beta with watchOS 27.3 on November 3, 2026, and Apple says neither creates an audio recording, that raw audio stays in hardware no one can read, and that only condensed text reaches its Private Cloud Compute servers, which keep nothing. But Siri Recap gives the people around you no signal that it's on, sends your calendar and location labels along with the text, and keeps a saved summary on your devices until you delete it.

We read Apple's 11-page Audio Intelligence Privacy Overview (dated September 2026), its support article on Audio Intelligence (published November 3, 2026), the September 9 press release, the Apple Watch Series 12 page, Apple's November 3 developer beta notice, its iCloud data security overview, and its Private Cloud Compute security post, all on November 5, 2026. Apple deserves credit here. It published the whole data path, stage by stage, two months before the beta shipped.

What are Siri Recap and Live Rewind?

They are two of the four Audio Intelligence features Apple announced for Apple Watch Series 12 and Ultra 4 on September 9, 2026 (Apple). Siri Recap takes ambient notes on your conversations through the day and turns them into "high-level Apple Intelligence-generated summaries" with a title and key points (Apple). Live Rewind shows the last 15 seconds of a conversation as text when you double-press the Digital Crown. The other two, Sound Recognition and Music Recognition with Shazam, don't transcribe speech.

Apple's developer site posted the watchOS 27.3 and iOS 27.3 betas on November 3, 2026 (Apple). The support article lists the limits: English only to start, "not initially available in the EU," not available in China, not for anyone under 18, and "subject to daily usage limits" (Apple). Both features are opt-in.

Is the Apple Watch always listening?

Yes, in a narrow sense. For Siri Recap, a lightweight model on the S11 chip checks whether speech is happening nearby, and Apple says it "doesn't transcribe or record anything" (Apple). When it hears a conversation, the audio flows into a buffer inside the chip's Secure Exclave, a hardware-isolated compartment that Apple says watchOS, apps, you, and Apple can't access.

Live Rewind needs a constant buffer to work at all, since it shows speech that has already happened. Apple calls it "a continuous rolling buffer" in which "old audio is continuously replaced by new audio." Only a double-press sends the last 15 seconds to your iPhone for transcription.

Apple's overview says "there is no recording to share, forward, or produce if requested by any party, because no recording exists." That promise covers audio only. A recap you save is text, and it stays on your devices until you delete it.

What does Siri Recap send to Apple's servers?

Condensed text, plus context about where you are and what's on your calendar. The watch encrypts the audio and sends it to the Secure Exclave on your paired iPhone, which transcribes it, writes a condensed version "less than half the length of the original transcript," and then deletes the audio (Apple). A safety model screens the text, and the condensed version goes, encrypted, to Private Cloud Compute (PCC) for the summary.

Apple's overview says "contextual information is also sent." It lists Now Playing data, calendar data to title the summary, "high-level location labels such as home, work, and school," your city, state, and country, and point-of-interest categories like "grocery store" or "park." Apple says precise location and specific places are not included. Apple's support article says only that the text is sent "with some context" (Apple).

PCC is the strongest part of the design. Apple says data in PCC "is never stored or accessible by Apple or anyone else" and that "independent security experts can verify this promise at any time." Apple's 2024 PCC post set the rule that "no user data is retained in any form after the response is returned" (Apple). Our page on whether Apple Intelligence is private covers how outsiders check PCC.

Where your words go, stage by stage

Built from Apple's overview and support article, read November 5, 2026.

Sources: Apple, Audio Intelligence Privacy Overview, Apple Support.

Apple's two documents differ on one row. The overview says that when you ask Siri about a Live Rewind snippet, "only the text is sent to Private Cloud Compute," and that a saved snippet syncs end-to-end encrypted. The support article says a snippet you ask Siri about or save "will be securely sent to Private Cloud Compute."

Do the people around you know?

Only with Live Rewind. When you trigger it, Apple says "an audible chime plays from the speaker on your Apple Watch, even if your Apple Watch is on silent or you have headphones connected," and a full-screen animation and microphone indicator appear (Apple).

Siri Recap has no signal for anyone but you. Apple's overview says "there is no audible signal because no raw audio is retained." The watch notifies you when Siri Recap starts or stops (Apple), and nothing tells the person across the table.

Apple says Siri Recap "does not identify and attribute speakers," though names spoken aloud can end up in a summary. Cult of Mac's September 11 explainer said "Siri Recap uses 'Speaker A' and 'Speaker B'" (Cult of Mac), which Apple's own documents contradict. Siri Recap is designed to summarize "the conversation most audible to you," and it pauses when you're listening through paired headphones or have Active Noise Cancellation on. Apple also says recaps omit "financial data, government-assigned identifiers, authentication data, and select personal identifiers." For how recording-consent rules work with AI note-takers, see whether Plaud AI is safe.

How long are recaps kept, and who can read them?

Seven days at most, unless you save one. Apple's support article says recaps "can be set to automatically delete after a period of up to 7 days," and that you can view, edit, and delete them in the Siri app at any time (Apple). Deleting one, the overview says, removes it "from all your devices and from iCloud."

Saved text syncs end-to-end encrypted, with a condition. Apple says it applies "if you use iCloud with two-factor authentication and have a device passcode," and that "Apple does not hold the encryption keys" (Apple). Apple's iCloud data security overview, published January 5, 2026, doesn't list Siri Recap among its categories (Apple).

End-to-end encryption keeps Apple out, but a saved recap sits in the Siri app's Recaps tab like any note. Anyone you hand your unlocked phone to, or an officer in a border search, can open it the same way they'd open your notes. Our page on what a border phone search reaches covers that case. If a watch or iPhone is lost, Apple says erasing it with Find My "invalidates the pairing keys in the Secure Exclaves immediately."

How do you control Siri Recap and Live Rewind?

Both are off until you turn them on. The paths below come from Apple's support article and overview, read November 5, 2026.

• Live Rewind: open the Watch app on your iPhone, tap Siri, then Live Rewind, and turn on Double Click Digital Crown. Turn the same switch off to stop it.
• Siri Recap: turn it on in the Watch app on your iPhone under Siri. Set a schedule by time, location, or both, such as only during work hours, or never at night.
• Pause it now: turn Siri Recap off from Control Center on the watch before a private conversation.
• Check what reached PCC: on your iPhone, open Settings, tap Privacy & Security, then Apple Intelligence Report, and pick the last 15 minutes or 7 days.
• Clear the summaries: in the Siri app's Recaps tab, delete any recap you don't need instead of waiting out the 7 days.

How to keep a recap private once you work with it

Every protection in Apple's overview holds because Apple runs every step, from the S11 chip to PCC to the Siri app. A recap leaves that chain the moment you do something with it: export it to another app, or paste it into a chatbot to draft the follow-up email or explain what the doctor said. From there, the chatbot's own storage and training rules decide what happens to it, as our look at whether AI chats are private lays out. Morse is built so the history of the chat you paste it into stays in your browser, encrypted.

• E2EE, for a recap no server should read. Pick an open-weight model like GLM, Kimi, or DeepSeek. Before anything leaves your device, your browser checks the secure enclave's hardware attestation, then encrypts the message so only that enclave can read it. Morse's servers relay ciphertext they can't read, and the reply is decrypted only in your browser. The enclaves are run by third-party providers, not by Morse, and the guarantee rests on the enclave hardware and attestation working as designed. What a trusted execution environment is explains the check. E2EE chats come with Pro, $19 a month.
• Private, for everyday notes you want turned into a to-do list. It's the mode a new chat opens in. Morse has zero data retention agreements with its inference, search, and other providers, so they keep nothing, and where a provider confirms zero retention on each reply, Morse checks it and refuses a reply that doesn't.
• Anonymous, for GPT, Claude, or Gemini without your account. Morse's proxy removes your account, email, and IP address and sends the message under Morse's own account. The provider sees the recap without knowing it's you, and may keep it for a limited time to check for abuse, under its own policy. Recaps can still carry names people said aloud, so take those out first.

In every mode, your chat history is stored only in your browser, encrypted, and locked when you sign out; opening it takes one key kept on your device and one our server hands over at sign-in. Morse doesn't train AI on your content, sell your data, or show ads (Morse privacy policy). Files you attach are sent with the message and never stored by Morse. Because we don't store chats, we usually have very little to give authorities. Clearing your browser deletes the chats for good, and we can't recover them, so keep a copy of anything you need.

Try a chat from the Morse home page without an account, or start free with no card.