Siri

Incomplete, delayed and not restorable: there is no export of Siri AI as an agent, Apple's asynchronous data copy request does not list Siri conversations or data, and nothing can be restored elsewhere.

• Get a copy of the data associated with your Apple Account

No export captures Siri's configuration, instructions, conversation history, semantic index or logic; conversation history syncs through iCloud but cannot be taken out as the agent.

• Get a copy of the data associated with your Apple Account
• Siri AI, a profoundly more capable and personal assistant, is here

Siri AI runs only inside Apple's proprietary operating systems on supported Apple hardware, with complex requests routed to Apple's Private Cloud Compute. No free, open-source runtime can execute it.

• Siri AI, a profoundly more capable and personal assistant, is here
• Apple Intelligence & Privacy

Siri's identity is the Apple Account and device, with requests tied to rotating device identifiers, so nobody can verify after a move that it is the same agent.

• Siri, Dictation & Privacy

Siri AI depends on Apple's OS updates, Apple-signed PCC software and Apple servers, and Apple applies daily usage limits to server-dependent features. Apple can change or withdraw functionality remotely.

• Siri AI, a profoundly more capable and personal assistant, is here
• Private Cloud Compute: A new frontier for AI privacy in the cloud

Tools, personal context and app actions come from Apple's OS frameworks and Apple Foundation Models built with Google's Gemini. Announced Extensions let an installed app handle some generative requests, but Siri's capabilities cannot run on a local open-weight model.

• Apple unveils next generation of Apple Intelligence, Siri AI, and more
• Siri AI, a profoundly more capable and personal assistant, is here

Siri's state (semantic index, conversation history, settings) is held in undocumented system stores and end-to-end encrypted iCloud sync. No documented open format readable without Apple software is provided.

• Siri, Dictation & Privacy
• Siri AI in iOS 27: Features, Requirements, and How It Works

Apple does not publish Siri's system or planner prompts, and owners cannot view the instructions placed in the model's context. Reporting on iOS 27 frameworks describes an internal Siri planner prompt and tool definitions not exposed to users.

• Apple unveils next generation of Apple Intelligence, Siri AI, and more
• Siri's AI can be replaced: iOS 27 model delegation

PCC is designed to be stateless and Apple states PCC data is not retained. Apple does keep Siri request data, including transcripts, associated with rotating random identifiers for up to two years outside the owner-inspectable state, and a reviewed subset may be kept longer.

• Siri, Dictation & Privacy
• Private Cloud Compute: A new frontier for AI privacy in the cloud

The Siri app shows conversation history across devices, and the exportable Apple Intelligence & PCC Report lists requests sent to Private Cloud Compute and Extensions. Neither is documented as a complete history of the app actions and tool calls Siri performed.

• Apple Intelligence & Privacy
• Siri AI in iOS 27: Features, Requirements, and How It Works

Siri's orchestration logic and models are closed and compiled into Apple's OS and server software. Owner-built Shortcuts are viewable in the Shortcuts app, but Siri's own logic is not available as readable source.

• Private Cloud Compute: A new frontier for AI privacy in the cloud

Apple states Siri request history is not used to build a marketing profile and is not sold, and no advertising in Siri AI has been reported. Apple publishes no policy on how web sources or third-party app content are ranked in Siri answers.

• Improve Siri and Dictation & Privacy
• Siri, Dictation & Privacy

Apple does not document whether every consequential Siri action is durably recorded, or whether an action is blocked when it cannot be recorded.

• Apple Intelligence & Privacy

Apple's tamper-evident transparency log covers PCC software measurements, not Siri's actions, and Siri conversation history can be deleted without a detectable trace.

• Private Cloud Compute: A new frontier for AI privacy in the cloud

No owner-facing record of Siri's actions is documented, so whether the agent can alter or delete it cannot be assessed.

• Apple Intelligence & Privacy

The Apple Intelligence & PCC Report is available in Settings and can be exported for review with general tools. It covers PCC and Extensions requests only, not on-device actions.

• Apple Intelligence & Privacy

Siri sends messages through Messages, Mail and third-party apps, and nothing documented lets Siri's record of an exchange be matched against the other side's.

• Siri AI, a profoundly more capable and personal assistant, is here

Siri AI and its OS runtime are proprietary. Apple publishes PCC software images for binary inspection and a subset of security-critical PCC source, which is not OSI-licensed or reproducible by owners.

• Private Cloud Compute: A new frontier for AI privacy in the cloud

Devices only send data to PCC nodes whose attested software matches measurements in the public transparency log, extended to Google Cloud nodes with a verifiable hardware ledger. The owner cannot inspect the full active configuration, including prompts and on-device model settings.

• Private Cloud Compute: A new frontier for AI privacy in the cloud
• Apple's Private AI Will Run on Google's Servers

Messages Siri sends carry only the owner's account identity in Messages or Mail; recipients cannot verify that they came from Siri under the owner's authority, and nothing carries over after a migration.

• Siri, Dictation & Privacy

Apple's research tooling verifies PCC software against its transparency log, but nothing lets the owner check the integrity of a record of Siri's actions.

• Private Cloud Compute: A new frontier for AI privacy in the cloud

Siri's state sits in undocumented system stores and encrypted iCloud sync that the owner cannot access, so the owner cannot verify whether it changed between two points in time.

• Apple Intelligence & Privacy

Owners can adjust Siri's voice expressiveness and pace, but Apple documents no custom instructions and the underlying instructions cannot be read or rewritten.

• Siri AI, a profoundly more capable and personal assistant, is here
• Siri AI in iOS 27: Features, Requirements, and How It Works

Siri app conversations can be deleted individually or auto-deleted after 30 days or one year, and Siri & Dictation history on Apple servers can be deleted. The personal semantic index and retained preference context cannot be viewed or edited item by item.

• Siri, Dictation & Privacy
• iOS 27 Siri Auto-Delete Feature: What It Covers and What It Doesn't

Owners can build Shortcuts that Siri can run, adding their own workflows. Siri's core planning and execution logic cannot be changed.

• Apple unveils next generation of Apple Intelligence, Siri AI, and more

Siri gains tools from installed apps that expose App Intents, and owners can limit per-app Siri access and data sharing. New tools must come through apps distributed via Apple's platforms; arbitrary owner-defined tools or protocols are not documented.

• Siri, Dictation & Privacy
• Apple unveils next generation of Apple Intelligence, Siri AI, and more

Apple Intelligence Extensions, announced at WWDC 2026, let owners pick an installed app's model (such as ChatGPT, Claude or Gemini) for on-demand generative requests; reports indicate it was not yet activatable in the launch beta. Apple's own models remain the core planner, and local open-weight models are not supported.

• Apple Intelligence & Privacy
• iOS 27, macOS 27 to Let You Swap Siri AI for Claude and Other Third-Party Models

Extending Siri requires App Store–distributed apps subject to Apple review, and Siri AI requires specific recent Apple hardware. Owners cannot modify the agent outside Apple-approved channels.

• Siri AI, a profoundly more capable and personal assistant, is here

OS-level permissions, enforced below the model, govern which apps and data Siri can use, and owners can disable Siri per app. Owners cannot set which contacts or channels Siri may use for communication it initiates.

• Siri, Dictation & Privacy

App Intents can require user confirmation before consequential actions, enforced by the OS. Which actions are gated is set by Apple and app developers, not selected by the owner.

• App Intents documentation

Siri interactions are foreground and can be dismissed, and Siri can be turned off in Settings. Apple does not document halt semantics for multi-step actions already in progress.

• Siri, Dictation & Privacy

Improve Siri and Apple Intelligence analytics are opt-in, and PCC data is not stored or used beyond the request. Audio or transcripts, request metadata and location are still sent to Apple servers and retained, which the owner cannot confirm by network inspection.

• Improve Siri and Dictation & Privacy
• Siri, Dictation & Privacy
• Apple Intelligence & Privacy

Siri acts through apps and accounts whose credentials are held in Apple's OS and the apps themselves. Owners can revoke app permissions, but credentials are not inspectable as agent secrets and do not travel with an exportable agent.

• Siri, Dictation & Privacy

Owners can delete Siri app conversations and Siri & Dictation history, and can delete their Apple Account. Apple may retain a reviewed subset of Siri interactions beyond two years, and the memory layer is not covered by conversation auto-delete.

• Improve Siri and Dictation & Privacy
• iOS 27 Siri Auto-Delete Feature: What It Covers and What It Doesn't