Speaker Johnson’s Covenant Eyes Scandal Sent Users to Punge. Here’s What They Were Afraid Of.

2026-03-05 · Source: AI Advances - Medium · Field: Technology & Digital — Cybersecurity & Data Privacy, Artificial Intelligence & Machine Learning, Software Development & Engineering · Depth: Intermediate, medium

Summary

The controversy surrounding Speaker Mike Johnson's use of Covenant Eyes, an internet monitoring app, has prompted a surge of users to seek privacy-focused alternatives like Punge. Covenant Eyes, designed for accountability, captures screenshots of user activity at least once a minute, uploads them to its servers, and uses AI to analyze content before sharing blurred results with an accountability partner. Security experts, including former Twitter CISO Michael Coates, have labeled Covenant Eyes a "modern-day wiretap program," citing significant national security and privacy risks due to the indefinite storage of sensitive user data on company servers. Users expressed alarm over the realization that their private struggles were being stored by a third party, leading them to question the inherent privacy trade-offs of cloud-based accountability tools. Punge, developed as an on-device scanner for sensitive content, offers an alternative by processing all data locally, ensuring no information leaves the user's device.

Key takeaway

For CTOs and VPs of Engineering evaluating digital accountability or content moderation solutions, you should prioritize tools offering on-device processing to mitigate significant data privacy and security risks. Relying on cloud-based monitoring, as exemplified by Covenant Eyes, exposes sensitive user data to potential breaches and third-party access, creating liabilities. Implement solutions like Punge that keep all data local to maintain user trust and reduce your organization's attack surface.

Key insights

Accountability tools requiring cloud data storage inherently compromise user privacy and create security vulnerabilities.

Principles

• On-device processing enhances data privacy.
• Cloud-based monitoring creates third-party data risks.

Method

Punge uses on-device AI (Apple's CoreML on iOS, LiteRT on Android) to scan photo/video libraries for sensitive content, ensuring no data is uploaded or stored externally.

In practice

• Audit existing media libraries for sensitive content.
• Evaluate accountability tools for local processing options.

Topics

• Data Privacy
• On-device AI
• Internet Accountability Apps
• Mobile Security
• Surveillance Technology

Best for: CTO, VP of Engineering/Data, Executive, Security Engineer, Software Engineer, AI Ethicist

Related on AIssential

• “World domination” by a coordinated cabal is not supported; the realistic danger needs no cabal. Ambient, profit-driven mass surveillance, plus a handful of opaque choke-point firms... — The core danger to civil liberties stems from profit-driven mass surveillance and opaque platform control, not a coordinated "Big Tech" cabal.
• Tech companies bet on PC comeback — Rising AI data privacy concerns are driving a shift to on-device processing and automated local/cloud workload management.
• Meta cuts contractors who reported seeing Ray-Ban Meta users have sex — Public disclosure of privacy breaches by contractors can lead to contract termination and regulatory scrutiny.
• We Are Crowdsourcing the Panopticon — Citizen-recorded accountability footage now recursively feeds state surveillance, creating a "surveillance ouroboros" where oversight becomes tracking.
• Why Europe Wants Its Own AWS & Are We Headed Toward Multiple Internets? — Regions are pursuing sovereign cloud solutions to address data privacy, encryption, and vendor control concerns, potentially fragmenting the internet.
• Accountability — Real accountability arises from ordinary people demanding, publicizing, and using information to challenge entrenched power structures.

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by AI Advances - Medium.