/e/OS Betrays Users' Privacy - OpenAI being integrated directly into core OS

Alas, I did clear storage and cache for the Updater app. Still rebooting and it will not find any further updates.

Maybe it is the DATE of the release and not the release version that the Updater is checking?
/e/OS official FP4 download provides these updates, where only the latest entry from 3.01-a14-20250707 is newer than my old 2.0-s-20250319 patch. Not sure where I shall seek help. This thread is not the proper place .

Android 14

Android 13

Android 12

1 Like

For anyone who may be unaware, Murena was recently caught secretly sending /e/OS users’ biometrics to OpenAI. The only reason it even came to light was someone discovered it when they were diving in their terms of service.

Well, now they’re actively purging their forums of user commentary, including shadow-removing posts and wholesale deleting entire accounts. I grabbed a screenshot of this before they could delete it:

Anyone else a little freaked out to see them not just doubling down on this decision, but actively silencing their userbase and trying to hide people’s objections?

2 Likes

I really have no idea what this screenshot should proof, as its completely out of context.

Flagging and deleting posts not in line with forum rules is a normal process.

I’m actually tempted to flag your post for discussion with the moderators to delete it. I will not, but explain you publicly why I would normally do it: It has nothing to do with Fairphone and contains exaggerated unproven accusations. For me its pure flame baiting and not in line with our forum rules.

Edit: btw I merged your topics.

5 Likes

Please don’t remove the above comment, as criticism may be ghosted in the /e/OS forum.

Further I think Fairphone should think about the partnership with /e/OS/. There is a better de-googled OS which works perfectly with FP: https://iode.tech/

3 Likes

I’m missing a reference to where users got proof their data was sent while having this option disabled and/or not having the required Murena Workspace Premium subscription as per https://doc.e.foundation/murena-voice-to-text.

I don’t say it’s not there, I’m only saying I’m missing it here as a sound base for an argument. Otherwise it’s just some claim.


Source: Me?
Here are some possible non-trivial references at least …

https://iode.tech/iodeos/

https://doc.e.foundation/what-s-e

7 Likes

I wasn’t expecting to have to ā€œproveā€ anything, so I didn’t capture the whole conversation. But it’s hardly out of context.

Congrats, you’re lightyears ahead of Murena already simply because you’re not acting in secret.

Surely this is a joke? Fairphone directly partners with this company to sell their product.

Completely false. Click through the link above and you’ll see for yourself that the CEO of Murena admits that is true, though of course he tries to obfuscate, minimize, and downplay the significance of Murena’s choice.

It can’t be disabled. It’s a system app that can’t be uninstalled. And Murena themselves confirms that every single person who used it had their voice sent to OpenAI without warning, and with ā€œconsentā€ only in the sense that there was a legally-mandated disclosure buried in Murena’s terms of service, which hardly seems like real ā€œconsent.ā€

Source (is this so hard)?

Because it’s not https://murena.com/terms-conditions/.

System apps can be uninstalled by the way (via ADB, so yes, not via a click of a button, but still possible thanks to Android).

1 Like

what link and what is true? I was not talking about what they do reg. the voice to text feature.
Howerver for sake of completeness a 5 day old statement of the CEO which in my eyes proves they are listening to critics.

The second point is more personal, since I personally take full responsability in this feature’s software architecture and for the choice of API providers. I’ve understood that I underestimated the emotional part of these discussions, and that whatever we would do to improve and fix this Voice to text feature to make it perfect in terms of Privacy, as long as it will use an OpenAI service we will see people use this case to spread FUD against /e/OS and Murena and hurt our reputation as a pro-Privacy OS.

Therefore, we have started to look again at possible alternatives. The only credible alternative today (e.g. without relying on a private service that you have to trust), would be to run an STT model for the purpose of this feature.

There is one possible way to make it, using the Whisper model, that is open source, and that we could install and run on our servers. The blocking issue for now is cost: the inference of such models is very costly in terms of GPU usage.

So we’ll be continuing to explore this approach and figure out how we can solve the economical equation to make it sustainable, and finally stop using OpenAI once it’s ready.

Meanwhile, to all users who don’t trust the current implementation: just don’t use it and you are safe.

Overall sure such accusations you made have to be proven. You cant just come here and drop severe accusations towards someone. Thats inappropriate communication in our forum.

So I will refer again to our forum rules and as a Moderator of this forum and kindly ask you to follow those moving forward when sharing information, to keep the forum and discussion constructive.

https://forum.fairphone.com/faq

We dont need to discuss this ā€œhow toā€ further. You made your post its still there, just moving forward remind the rules to avoid your comments are flagged and removed as being inappropriate.

7 Likes

This thread contains multiple links to Murena employees admitting that they sent user voice data (i.e., biometrics) to OpenAI without any notification to their users beyond the bare minimum disclosure in their terms of service. The **** more ā€œproofā€ do you need than their CEO admitting it’s true??

1 Like

You either dont read what I wrote or your are trolling on purpose, so I will repeat for you

And this is actually another inappropriate red flag

And dont tell me **** isnt a placeholder for faulty language…

So whats the plan you have, troll as long as we start flagging and deleting your posts so that you can go wherever and post such about our forum as well?

Which thread?

However, what I read in the e/OS forum is: they implemented that TTS feature for premium user only. The tool is activated by default and Murena confirms they send anonymised data. They explain what anonymised means in this context.

As a result, an /e/OS user that would use Voice to text will touch the microphone icon on the keyboard, that will start a software stack that will:

  • connect to the anonymizer proxy
  • open an audio stream to the proxy
  • wait for text transcription in return

The proxy itself is receiving audio streams from users and is relaying these streams to the OpenAI servers using the gpt-4 transcribe API, and is waiting from transcribed text in return, before relaying back to the /e/OS device. As a result, OpenAI servers see:

  • hundreds of subsequent or simultaneous audio streams to process
  • all threads coming from 1 IP address (the proxy)

On the proxy, logs show we have up to 1000 concurrent audio streams open.

Why we think that this feature is acceptable in term of Privacy

  1. all audio streams are mixed from one callers: this would be very difficult to create a match between a user and a series of messages
  2. all are coming from a single IP address making it impossible to track a specific user
2 Likes

You cannot anonymize a person’s voice anymore than their fingerprints. I assume you know better and are just making this preposterous argument out of some misplaced sense of brand loyalty.

Also btw, if Google were accused of violating their users’ privacy, would you credulously quote their CEO and say ā€œsee guys, it’s fineā€ the way you are with Murena? This is stupid

3 Likes

You are still not reading properly and accusing me for things that I have never done. This is my last call for you to stop your way of communication its still inappropriate and will be flagged moving forward.

Exactly, I find it extremely disturbing how nonchalant /e/OS leadership is handling this issue.

They are sending people’s voice data to a voice recognition service and expect that service not to be able to connect different recordings of the same person, seriously?!

Doesn’t matter to me that it’s only a premium feature, the fact that this solution was demed acceptable at all is a huge red flag! A privacy first OS doing business with OpenAI, who famously ingest any data they can get their hands on, no, just no!

6 Likes

Man, I just love the timeline we are living in. First something weird happens with CalyxOS and now this. What’s even left for the Fairphones at this point? AXPOS? Iode? Some India build from XDA’s forum?

I watched Alice in Borderland just the other day and I’m expecting the Joker card to appear at my desk any day now.

3 Likes

Thank you. I’m sick to death of people trying to act like this is no big deal. Murena hasn’t even apologized; they’ve done nothing but justify and minimize this whole time.

With Google closing off Android development from AOSP, withholding security updates, and killing sideloading, I think the writing is on the wall for Android as an OS altogether. And if ā€œprivacy friendlyā€ companies like Murena are now casually sending users’ biometrics to big tech, it’s time to start looking at entirely different platforms.

I think the next thing on my list is Ubuntu Touch. The FP5 is one of their flagship devices. Might install it as a test case in the next week or two.

2 Likes