Every correction stays up, with a date. A site that has never corrected anything is either not covering anything that changes, or not telling you when it was wrong.
We said: full disk encryption is commonly off by default; switch it on.
Actually: both defaults moved. Windows 11 has encrypted by default since version 24H2, including Home edition, on clean installs. macOS 26 enables FileVault during setup when signing in with an Apple Account.
Still true, and now the real point: in-place Windows upgrades from older versions are often still unencrypted; a PC set up with a local account only can be encrypted with **no recovery key escrowed anywhere, which is its own failure; and backups remain commonly unprotected** — an iPhone backup through Finder is not encrypted unless the box is ticked, and iCloud Backup is only end-to-end encrypted with Advanced Data Protection switched on, which is opt-in.
Why it matters: this was in the answer aimed at practitioners holding patient records. Telling someone to turn on a thing already on wastes their trust; missing the backup, which is genuinely exposed, misses the actual risk.
We said: to find out whether a provider trains on your uploads, look for the words *"to improve our services"*.
Actually: that phrase appears in nearly every privacy policy and mostly covers things that are not model training. The reliable signal is the named toggle — ChatGPT's *Improve the model for everyone, the Gemini app's Keep Activity, Claude's Help improve Claude*.
Why it matters: a heuristic that sends people looking for the wrong thing is worse than no heuristic. They would have found the phrase everywhere and concluded everything was equally bad.
We said: recordings are kept on company servers by default and reviewed by human contractors.
Actually: true of Amazon today. Apple has not retained Siri audio by default since 2019. Google stopped saving Assistant audio by default in 2019, though the Gemini app replacing it keeps activity on by default and has a subset human-reviewed, retained up to three years.
Also missing: on 28 March 2025 Amazon removed the option that let three Echo models process some requests on-device, replacing it with a setting that still sends audio to Amazon.
We were about to say: the FTC's action against GM and OnStar over driving data sold to insurance brokers, without saying where it applies.
Actually: the FTC order binds GM in the United States. It does not bind GM in Canada, and no Canadian enforcement action exists. Canada's Privacy Commissioner has raised the issue and funded research; that is not a remedy.
Why it matters: a Canadian reader would reasonably have assumed the protection was theirs.
We said: a weather app with permanent background location access is a tracking device.
Actually: Android removed "allow all the time" from the runtime permission dialog in 2020. Background access now requires a deliberate trip into settings. The claim was true once and stated with full confidence six years after it stopped being true.
All five were found by running a dedicated verification pass against primary sources before publishing, not by a reader complaining. That pass is not optional and it is not a formality. On its first use it corrected six of eight items on a single page.
Separately, during that research an automated summarisation step **fabricated an official Google policy list that does not exist**. It was caught only because the agent re-read the raw source. That is the reason nothing on this site auto-publishes.