[dixie_land]

> Nothing in the article suggests they were linked to any kind of user identifier

They were able to provide the customer a bundle of his recordings upon request so they must've maintained such a lookup mapping.

Of course that led to the mix up reported here. But I'd argue it's safer if on Amazons side they simply can't fulfill such request themselves due to anonymization.

[closetohome]

I suppose that does raise a question of where you draw the line on a company's obligation to anonymize information. Is disassociating a user ID from the data enough? What about data that makes the user identifiable through patterns?

If I say "Alexa, my name is Bob Jones and I have chlamydia," they're not really helping me out by just not associating that audio clip with my username.