Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that Samsung collects and stores voice recordings on its servers when users enable voice commands or contact customer service, and that third-party speech-to-text or call center providers may also receive and store voice commands. The policy also states that keyboard input typed when predictive text is enabled is collected and may be synchronized across Samsung mobile devices via a Samsung account.
This analysis describes what Samsung's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Voice recordings and keyboard input represent categories of personal information with heightened sensitivity; collection of keyboard input through predictive text and synchronization across devices via Samsung account extends the scope of data collection beyond single-device interactions. Third-party receipt of voice commands via speech-to-text providers introduces additional data controllers outside Samsung's direct control.
The updated policy expands Samsung's data collection authority to include device registration, verification for repairs, and configuration of device settings. The terms now explicitly state that Samsung may collect card and transaction information if you apply for a Samsung-branded payment card. Samsung clarified that it will only send personalized marketing when you have provided consent, where required by law. The policy removed its previous statement that defective devices are wiped of personal information before analysis; the updated terms now state Samsung will analyze returned defective devices without that explicit pre-analysis data deletion commitment. For US residents, the policy now discloses rights to opt out of sale of personal information, sharing for cross-context behavioral advertising, targeted advertising processing, sensitive data collection or processing, and to request lists of third parties receiving your information.
View change record →The agreement authorizes collection and server-side storage of voice recordings from voice command use and customer service interactions, with potential receipt by third-party speech-to-text and call center providers. Keyboard input typed when predictive text is enabled is collected and may be synchronized across multiple Samsung mobile devices linked to a Samsung account.
Cross-platform context
See how other platforms handle Voice and Keyboard Input Data Collection and similar clauses.
Compare across platforms →Monitoring
Samsung has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Recordings of your voice that we make and collect on our servers when you enable this function and use voice commands. We also collect and store recordings of your voice when you contact our Customer Service team. Please note that if we work with a third party service provider that provides speech-to-text conversion services or call center services on our behalf, this provider may also receive and store certain voice commands in accordance with the contract concluded between us and the trusted third-party service provider. The words that you type when you enable "Predictive text". This feature may be offered in connection with your Samsung account to synchronize the data for use on your other Samsung mobile devices.Excerpt from Samsung's Privacy Policy
1. REGULATORY LANDSCAPE: Voice recording collection implicates federal and state wiretapping statutes, including the Electronic Communications Privacy Act, and state all-party consent recording laws such as those in California, Illinois, and other jurisdictions. Keyboard input collection through predictive text may engage state privacy laws that treat keylogging or input capture as sensitive data collection. The CCPA and CPRA classify certain voice data as sensitive personal information. The FTC exercises enforcement authority over deceptive or unfair voice data collection practices. 2. GOVERNANCE EXPOSURE: Medium. The policy discloses voice and keyboard data collection clearly, but the involvement of third-party speech-to-text and call center providers who may independently store voice commands introduces subprocessor exposure. The synchronization of predictive text data across devices via Samsung account means keyboard input may be stored and associated with user identity across multiple endpoints. 3. JURISDICTION FLAGS: California's CCPA and CPRA treat voice data as sensitive personal information requiring opt-out rights. Illinois, Florida, and other all-party consent states impose specific requirements on recording voice communications. The US Supplement includes an opt-out right specifically for collection of personal information through voice recognition features, which suggests awareness of heightened state-level exposure. GDPR Article 9 categories may be engaged where voice data reveals health or other sensitive characteristics. 4. CONTRACT AND VENDOR IMPLICATIONS: The policy states that third-party speech-to-text and call center providers receive and store voice commands pursuant to a contract with Samsung, but does not describe the data retention terms imposed on those providers. Procurement teams assessing Samsung's service provider relationships should evaluate whether subprocessor agreements include adequate deletion and retention obligations for voice data. Enterprise customers should assess whether employee voice interactions with Samsung customer service are captured and stored by third-party providers. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should verify that voice data collection disclosures satisfy state all-party consent recording requirements in applicable jurisdictions. The predictive text keyboard data collection and cross-device synchronization should be reflected in data mapping as a distinct personal information flow tied to Samsung account identity. The opt-out mechanism for voice recognition data collection described in the US Supplement should be evaluated for operational completeness.
Voice recordings and keyboard input represent categories of personal information with heightened sensitivity; collection of keyboard input through predictive text and synchronization across devices via Samsung account extends the scope of data collection beyond single-device interactions. Third-party receipt of voice commands via speech-to-text providers introduces additional data controllers outside Samsung's direct control.
The agreement authorizes collection and server-side storage of voice recordings from voice command use and customer service interactions, with potential receipt by third-party speech-to-text and call center providers. Keyboard input typed when predictive text is enabled is collected and may be synchronized across multiple Samsung mobile devices linked to a Samsung account.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Samsung.