Key takeaways
- Four recent stories, one pattern: wherever meeting audio lives in the cloud, it can be breached, subpoenaed, repurposed, or carried out the door.
- The Sequoia Benefits suit shows the governance gap: notes in a personal AI account follow the employee, not the company.
- Echo Chamber keeps the whole workflow on your Apple device, so there is no central copy to lose in the first place.
Your meetings should not live on someone else's servers
In the last two months, four stories have landed that all say the same thing about AI notetakers: the cloud part is becoming the liability. A benefits firm is suing over meeting notes that allegedly walked out the door with a departing employee. A federal court is letting wiretapping claims against a notetaker proceed. More than 180,000 meeting records were exposed by a backend flaw. And some 'AI' phone calls turned out to have humans on the line. The common thread is not one bad app. It is the architecture: wherever your audio lives, it can be breached, subpoenaed, repurposed, or carried out the door.
When the notes follow the employee
The freshest story is a governance story. On October 1, Sequoia Benefits filed suit in federal court in Colorado against a former broker and her new employer, Alliant. The complaint alleges she ran Granola AI on a personal account for roughly four months, capturing client meeting notes, and kept those notes after joining Alliant in July. Five claims, including federal and Colorado trade-secret misappropriation.
Read that slowly. The meeting notes lived in a personal cloud account, not a company system. When the employee left, the notes went with her, because nothing in the architecture stopped them. Every company that lets staff take notes in personal AI accounts is one resignation away from the same complaint.
When the bot is a third-party eavesdropper
In August, a California federal court let wiretapping and biometric-privacy claims against Otter.ai proceed toward discovery. The court held that Otter's meeting bot is a third-party eavesdropper under California law, not an invited participant, because it independently collects, retains, and uses recordings for its own commercial purposes, including training its AI models. Statutory damages in play run up to $10,000 per violation under federal wiretapping law, with no proof of actual harm required.
When the backend is the breach
Also in August, Dark Reading found a vulnerability in tl;dv's backend that exposed more than 180,000 meeting records belonging to over 80,000 users. One authenticated user could read other customers' meetings. A later write-up put the pattern plainly: every centrally stored transcript is a record of everything said, including the parts nobody would have chosen to write down, and most notetakers store them centrally by default.
When 'AI-powered' means human eyes
In September, Reuters and 404 Media found that some of Meta's Muse assistant 'AI' phone calls were routed through human call-center contractors, undisclosed to the people on the calls. Meta acknowledged the miss and rolled it back. The label said AI. The reality included more human eyes on your data than the label admitted.
Consent dialogs are promises. Architecture is the guarantee.
Across all four stories, the failure was never that users failed to read a privacy policy. It was that the audio existed somewhere it could be breached, subpoenaed, repurposed for training, overheard by contractors, or carried out the door in a personal account. You cannot breach, subpoena, or walk out with a recording that was never uploaded.
Built so there is nothing to hand over
That is why Echo Chamber is built the way it is. Recording, transcription, AI notes and summaries, search, and export all run on your iPhone, iPad, or Mac, with Apple Intelligence where available and a bundled local model as the fallback where it isn't. Speech recognition runs on-device. The AI polish only ever touches punctuation, capitalization, and paragraphs, never your words. There is no meeting bot to join your calls. There is no account.
The only things that ever leave the device are a model download, an App Store purchase check, an encrypted copy to your own iCloud if you turn sync on, or a support request you choose to send. With sync off, your recordings stay on the device that made them.
Before you choose
No. Recording, transcription, notes, summaries, search, and export run on your device. The only exceptions are the ones you control: a speech-model download, an App Store purchase check, encrypted iCloud sync if you turn it on, or a support request you choose to send.
Sources and further reading
Read the product documentation behind the comparison. Check the linked pages for current features and prices.
Explore Echo Chamber
If a meeting is worth recording, it is worth keeping off someone else's servers. Echo Chamber is free to start, with 60 minutes of recording per month.