Apple’s New Siri Auto-Delete Feature Hides a Google Gemini Deal

Apple is preparing to hand Siri users a setting most chatbots still hide behind opt-in toggles or quiet defaults: a switch that wipes conversation history after 30 days, after one year, or never. Bloomberg’s Mark Gurman, reporting on May 17, said the option will arrive with a standalone Siri app set to debut in beta at the Worldwide Developers Conference (WWDC) on June 8, with the public release riding alongside iOS 27 in the fall.

That privacy posture is real, and it also performs double duty. The same chatbot will lean on Google’s Gemini for its harder thinking, the product of a multi-year licensing arrangement both companies disclosed in January, which lets Apple ship a credible AI assistant without owning the underlying model.

Three Choices for How Long Siri Remembers

The new Siri app, which Gurman’s newsletter says will launch as a separate icon on the home screen for the first time, behaves more like ChatGPT or Gemini than like the assistant currently bolted into iOS. Users will be able to start new chats, scroll back through old ones in a Messages-style list, upload files for Siri to read, and switch into voice mode mid-conversation.

The retention switch mirrors Apple’s existing Messages app design. Pick 30 days and the rolling window auto-wipes anything older. Pick one year and you keep a longer scrollback at the cost of a fatter local history. Pick to keep indefinitely and Siri behaves like every other commercial chatbot on the market today.

What Apple is not promising is a default. The reporting did not specify which of the three settings will be the out-of-box pick, and that matters, because retention defaults shape user behavior far more than retention options buried in settings menus.

Google Gemini Is Doing the Talking

The auto-delete feature lives on top of an architecture Apple has not been able to build on its own. Apple and Google confirmed on January 12 that the next generation of Apple Foundation Models will be based on Google’s Gemini models and cloud technology, in what AppleInsider and CNBC have reported as an arrangement worth roughly $1 billion a year. The deal, as both companies framed it, leaves Apple in charge of where the user data sits and how it is handled.

In a joint statement on the Apple and Google partnership published on Google’s company blog, the two firms wrote that the arrangement would not change Siri’s data handling rules:

Apple Intelligence will continue to run on Apple devices and Private Cloud Compute, while maintaining Apple’s industry-leading privacy standards.

Apple chief executive Tim Cook went further on the January earnings call, telling analysts the company was “not changing our privacy rules” and that the “same architecture” announced in 2024 still applied. Practically, that means routine queries continue to be handled by Apple’s on-device models, with heavier reasoning kicked up to Apple’s Private Cloud Compute security architecture, where Gemini does the inference inside an enclave Apple administers.

The wrinkle is that the model itself has Google fingerprints on it. Whose behavior counts as “Apple’s privacy” when the brain answering you was trained, tuned, and updated by another firm is the question critics keep circling back to.

How Siri’s Retention Tiers Stack Up Against ChatGPT and Gemini

The numbers underline why Apple’s pitch is uncomfortable for the rest of the field. ChatGPT and Gemini both keep conversation data far longer than Apple says Siri will, and the controls users have to dial that back are buried inside settings pages most never visit.

Sources: Bloomberg’s reporting for Siri; OpenAI’s published help pages for ChatGPT; Google’s Gemini Apps activity and retention policy for Gemini. The Gemini line is the most interesting, because the model behind Siri is the same one Google sells under its own brand. Google’s own privacy hub confirms that even when a user deletes activity, chats sampled for human review, along with language, device, and feedback metadata, stay on Google’s systems for up to three years. Apple has not stated whether those same review pipelines apply to queries Gemini processes inside Apple’s enclave, only that Apple alone controls the data layer.

Tim Cook’s Pledge Sits Next to a Multi-Billion Dollar Vendor

Apple’s privacy reputation was built on a specific design choice: process as much as possible on the user’s device, and when you cannot, treat the cloud the way you treat the device. The redesigned Siri tests that design under heavier conditions than the company has faced before. A standalone chatbot that reads your files, holds a year of conversation, and routes the harder queries through a leased foundation model is a meaningfully larger attack surface than the dictation-and-timer Siri most owners use today.

What Apple Says It Controls

Apple has been explicit about four guarantees, each of which it published well before the Google deal was signed:

• Conversations are encrypted in transit and only decrypted inside the Private Cloud Compute enclave
• Apple has no path back into a compute node once a session ends, by design of the stateless attestation system documented in its October 2024 security research post
• Google cannot use Siri conversations to train Gemini, a contractual term both companies confirmed in their joint statement
• The auto-delete window applies to the on-device history, with no parallel retention on Apple’s servers

The bullet list is the load-bearing part of Apple’s pitch. If any of the four guarantees cracks under audit, the rest of the privacy framing deflates with it.

What the Critics Flag

Security researchers and several Apple-watching analysts have raised the same objection in different words. Once your assistant’s brain is leased from a company whose business model depends on data collection, the question is not where the bits sit but whose product behavior they shape. Commentary from the IronCore Labs research group put it bluntly: the enclave is only as private as its weakest link, and a third-party model is by definition a new link.

The second concern is opacity. Apple has not published the contractual carve-outs that govern how Google can use aggregate signals from Siri traffic, only that individual conversations are off-limits for training. That gap is what the auto-delete switch is, in part, designed to make less salient. A control the user can see and toggle does more for trust than a clause they cannot read.

The Beta Label Buys Apple Cover

Even after the public launch in the fall, the new Siri will carry a beta tag, according to Gurman. That is unusual for Apple, which generally ships consumer-facing features finished, but it reflects two years of internal slippage on the Apple Intelligence roadmap, including the personalized contextual Siri the company promised at WWDC 2024 and quietly pulled the next spring.

A beta sticker also lowers the bar in two helpful ways. It tells reviewers and reporters to grade on a curve. And it gives Apple a graceful path to ship a feature, watch how users hit edge cases the lab missed, and patch behavior without a press cycle each time a quirky answer goes viral on social media.

Beta does not lower the bar on privacy, though, and that is where the auto-delete feature does its real work. Privacy is the one Apple promise the public still rates the company highly on, according to consumer surveys cited by analysts at AppleInsider this month. A beta chatbot with a shred toggle is a much easier sell than a finished chatbot with quietly indefinite retention.

What Users Will Decide at WWDC

The conference opens June 8 in Cupertino, and the privacy framing will sit alongside the live demos. What the company still has not said is which of the three retention windows ships as the default, whether the file-upload feature applies the same shred rule to attachments, and whether the beta opt-out exists on its own or only bundled with the broader Apple Intelligence toggle.

If the default is 30 days, Apple will have handed users the strongest baseline in the category and made it harder for rivals to keep indefinite retention as a quiet default. If the default is indefinite with a buried switch, the privacy pitch reads as branding rather than design, and the Gemini partnership becomes the louder story. The shape of one menu item on a stage in Cupertino in three weeks will tell the rest.