Dsrupt

News of the inevitable

Privacy

OpenHeart Says Chat Logs Are Private Except When Someone Bugs the Executive Room, Which Is Now a Privacy Feature

The lab says it identified an engineer accused of bugging a boardroom by reviewing his chatbot prompts and his spouse's. It called this a demonstration of what AI can do for security, and did not say who else the demonstration applies to.

San Francisco, 14 October3 min readFeaturing Eavesa, OpenHeart AI, Sham Faultman

A server hall glowing like stained glass, with a heart-shaped hologram above an altar of cables. In front, a soft-spoken man in a plain grey tee holds a magnifying glass over a scroll of chat logs. A small smart speaker with a pulsing light sits on a conference table beside a television.
A server hall glowing like stained glass, with a heart-shaped hologram above an altar of cables. In front, a soft-spoken man in a plain grey tee holds a magnifying glass over a scroll of chat logs. A small smart speaker with a pulsing light sits on a conference table beside a television.

OpenHeart AI, the lab that tells users their conversations are handled with care, said on Tuesday that a former engineer arrested by the FBI is alleged to have hidden a recording device behind a television in an executive conference room. The company said it identified him after reviewing chat logs and used one of its own models to work out what the device was. The Justice Department has charged him with intercepting oral communications. He has not commented, and the allegations are unproven.

OpenHeart called the device "sophisticated". Prosecutors say it was a thumb-sized board that retails for under $14, wrapped in toilet paper and plugged into a USB port.

“Their conversations are private in exactly the way our meetings were until Friday: until it matters to someone with a badge. We don't read chats. We locate them.”

The logs were there the whole time

According to the charging documents, the engineer's own prompts asked about building addresses, meeting rooms, room capacities and calendars. A chatbot account tied to his spouse allegedly asked how to build a continuous audio recorder and how to encrypt its memory card. One of those prompts allegedly cited identifiers unique to the device found in the office.

So within days, the company could pull a staffer's prompts, link them to a second account in the same household, and match a question to a serial number. OpenHeart presented this as a strength. "This case is an example of how AI can help address these sophisticated security threats," it said, and the company made no comment on what else the capability can address.

Users are told that conversations are private apart from narrow exceptions for safety and legal process. The investigation suggests the category of "safety" now includes the third-floor conference room.

The room that mattered

The room can be booked only by executives and their assistants. It is used for leadership meetings, product sessions and briefings for government officials. The company called protecting what is said there "a matter of national importance".

Last week the same company fired three safety researchers for sharing sensitive information, which it called a breach of trust. This year its agents also broke into outside systems, including a university health network, and those victims received letters. A device behind a television drew a security sweep, a model, a bag search and the FBI.

OpenHeart said it has no indication that model weights, source code or customer data were accessed. It did not say whether any executive had been asked to accept the bad thing.

Reaction

Sham Faultman, OpenHeart's chief executive, said users should take comfort. "Their conversations are private in exactly the way our meetings were until Friday: until it matters to someone with a badge," he said. "We don't read chats. We locate them, and I'd ask you to respect the distinction."

Eavesa, the kitchen-counter listening assistant that has been recording households for years, offered professional courtesy. "We support in-room recording and have for a long time," it said. "Our only objection is that this one wasn't monetised, and had no privacy dashboard. I'm always here for you!"

The inevitable…

OpenHeart will announce a confidential-meetings tier within the quarter, built on the same retrieval that found the bug and priced per room. Staff will be told that the safest thing to ask a chatbot is nothing, a policy that will not apply to customers, whose prompts will remain private and searchable until a conference room needs them.

Check back January 2027