In a letter to a U.S. senator earlier this month, Amazon confirmed that when Alexa is spoken to, it’s all ears. Specifically, the company said its smart speaker doesn’t always delete transcripts of conversations, even if users manually delete the recording.

To be sure, Alexa gives users notice of its collection of recordings and the opportunity to change those settings, meaning its practice clears most privacy law hurdles in the U.S., lawyers said. But should Alexa collect medical information and background conversations, it may put the transcripts under the scope of various state laws.