Privacy

Microsoft Recall and the Case Against Storing Everything

March 2026 · 5 min read

When Microsoft announced Recall, the internet had a reasonable reaction: absolute horror.

Recall takes a screenshot of your screen every few seconds, indexes everything, and stores it locally so you can search your entire computing history. Microsoft framed it as a productivity feature. Privacy researchers called it a stalkerware nightmare waiting to happen.

Microsoft delayed the rollout, faced more scrutiny, and then quietly brought it back anyway. The debate it kicked off, though, is still worth having. Because Recall is just the most obvious example of a design philosophy that's already embedded in tools millions of people use every day, including their meeting recorders.

The "store everything" philosophy

Recall's core assumption is: you might need this later, so keep it. That sounds reasonable until you think through the implications. Everything you typed. Every document you opened. Every website you visited. Every private message. Retained, indexed, searchable.

Cloud meeting recorders operate on the same logic. You recorded a call, so let's keep the audio. You might want to replay it. You might want to search it. You might want to share it. So the audio sits on their servers, indefinitely, unless you manually delete it.

Most people never delete it. They forget it's there. Months of meetings, hundreds of hours of conversations, all sitting in a database they don't control and rarely think about.

What "retained audio" actually means

Your meeting audio contains things you said with the assumption of a limited audience. Salary conversations. Confidential client information. Candid thoughts about colleagues or competitors. Product plans that aren't public. Legal discussions. Medical details if you're in healthcare.

When that audio lives on a cloud server, several things become true simultaneously.

The vendor can access it. Their engineers can access it for troubleshooting. Their support staff can access it if you open a ticket. Their AI teams may use it to train or improve transcription models. The fine print in most terms of service allows for this, often in language nobody reads.

The vendor can be breached. A security incident at Otter.ai or Fireflies.ai or any other cloud recorder becomes your security incident. Your client's confidential call from six months ago is now in an attacker's possession through no fault of your own.

The vendor can be acquired. The privacy-conscious startup you chose gets bought by a larger company with different incentives. Their data practices change. Your historical recordings are now governed by terms you never agreed to.

The vendor can be compelled to produce records. A legal dispute, a government request, a subpoena. Audio you forgot you created becomes evidence in a proceeding you had nothing to do with.

The better question

Recall's critics made a simple point: just because you can retain something doesn't mean you should.

The real value in a meeting isn't the raw audio. It's what was said, what was decided, and what needs to happen next. A transcript captures all of that. The audio itself, once it's been processed, has almost no additional value. It's just liability.

So why keep it?

For cloud recorders, the answer is usually: it's easier to store everything than to make decisions about what to delete. Storage is cheap. The costs of retention, including privacy risk, breach exposure, and vendor trust, fall on you, not them.

Local processing changes the calculus entirely

When transcription happens on your device, the data never leaves. There's no server to breach. No vendor to trust. No terms of service to audit every time the company updates them.

And when the transcription is done, there's no reason to keep the audio at all. Process it, extract the text, discard the recording. You end up with exactly what you needed: a clean transcript of what was said, stored locally under your own control.

This isn't the "store everything" philosophy. It's the opposite. Keep only what has lasting value. Discard everything else immediately.

That philosophy turns out to be a better privacy model than anything Microsoft Recall's critics proposed, because there's nothing to protect. The data isn't there.

This is what MeetingVault does

MeetingVault runs on your Mac. Transcription happens locally using Apple Silicon. Audio is processed and then discarded. Only the transcript is saved, and only on your machine.

No account required. No audio transmitted. No cloud retention. No vendor to trust with your most sensitive conversations.

If the Recall debate made you think harder about what your tools retain and why, this is the meeting recorder that takes that question seriously.

Join the waitlist and get founding member pricing when we launch.

← Back to MeetingVault