AI Note-Taking Bots Are Recording Zoom Calls Without Consent, and the Legal Risk Is Real

Quick Facts

• WebinarTV secretly recorded thousands of Zoom calls, including addiction recovery and anxiety support groups, then repackaged them as AI-generated podcasts.
• Twelve U.S. states require all-party consent to record, and violations can result in felony charges under laws covering tools like Otter.ai, Fireflies, and Zoom AI Companion.
• The AI meeting assistant market is projected to reach $21.48 billion by 2033, growing at a 25.8% annual rate.

A venture capitalist has renamed himself on Zoom. His display name now reads: “Jeremy Levine I do not consent to transcribing or recording.” The workaround is blunt, but the problem it addresses is serious.

AI note-taking apps have made recording a default behavior in remote meetings. That shift is creating legal exposure for companies and genuine harm for individuals who never agreed to be recorded.

The WebinarTV Scandal

The clearest example of what can go wrong involves WebinarTV, a platform that bills itself as a search engine for webinars. The company scraped public Zoom meeting links, sent bots into those calls, recorded the sessions, and turned them into AI-generated podcasts under a show called the “Phil and Amy Show.” The site claims to host more than 200,000 recorded webinars.

Among the meetings captured: a support group for people with panic and high anxiety, and a 12-step, faith-based recovery meeting for people with substance abuse issues. Both included participants’ full names and faces. Kimberly Dorris, executive director of the Graves’ Disease and Thyroid Foundation, said her organization’s meeting “was not intended to be recorded, but rather to be a private discussion among participants.”

WebinarTV primarily gained access through third-party browser extensions, including AI transcription and auto-join tools common in remote work environments. At least one such extension on the Chrome Web Store is developed by WebinarTV itself. Some users submitted meeting details directly to the platform without realizing how the data would be used.

Zoom said it cannot fully prevent third-party screen recording because “these recordings occur on the participant’s device and outside of Zoom’s environment.”

The Legal Exposure

Twelve U.S. states require all-party consent before a conversation can be recorded: California, Connecticut, Delaware, Florida, Illinois, Maryland, Massachusetts, Montana, New Hampshire, Oregon, Pennsylvania, and Washington. If any meeting participant is located in one of those states, every attendee must consent. Violations can result in felony charges.

Otter.ai is currently facing a class-action lawsuit in the U.S. District Court for the Northern District of California. The suit alleges the company secretly recorded private conversations on Zoom, Google Meet, and Microsoft Teams and used those recordings to train its transcription model, despite a privacy policy stating that transcripts are only used for AI training when users opt in.

A separate risk is emerging under the Illinois Biometric Information Privacy Act. When AI tools analyze vocal patterns to identify speakers, they may generate voiceprints. Courts have seen a wave of BIPA litigation in 2025 and 2026 from plaintiffs alleging those voiceprints were collected without notice or consent.

The Scale of the Problem

One enterprise customer found that 800 new accounts had been created for an unapproved AI note-taker over 90 days, nearly double the number created in all prior years combined. Otter.ai alone reports approximately 25 million users globally.

VC Eric Bahn told the Wall Street Journal he now assumes every founder meeting will be recorded before he even sees a phone on the table. One Silicon Valley founder told the outlet she records most first dates using the Granola app, then feeds transcripts to the AI model Claude to assess her own empathy and gauge who talked the most.

Security expert Bruce Schneier’s blog called the behavior “the digital equivalent of leaving your front door unlocked and having someone walk in to livestream your dinner party — technically possible, ethically dubious.”

What Founders and Executives Should Do

Companies deploying AI meeting tools need to audit which third-party extensions have calendar access across their organizations. They also need consent protocols that account for multi-state workforces. The gap between what these tools can do and what the law permits is where the liability lives.

Levine called always-on recording “socially unacceptable behavior” that “completely destroys the environment of free conversation.” Whether or not that view gains traction, the legal consequences for companies that ignore consent requirements are not a matter of opinion.

Read more: The Zoom hack that says, ‘Don’t record me’