Do Not Secretly Record Customer Interviews

Secretly recording a customer interview can turn a useful research habit into a privacy problem in one click.

Author: Koutian Wu; GitHub: ktwu01

This is not legal advice. It is a practical warning for founders, researchers, PMs, and anyone doing customer discovery across U.S. state lines.

The trap is easy to understand. You are not trying to sue anyone. You are not trying to publish the call. You just want a transcript so your team can learn from a customer interview. In product work, that feels like note-taking.

But recording law often does not start from your intention. It starts from a simpler question: did the people in the conversation consent to being recorded?

Internal use is still use

A customer discovery call usually feels informal, but it is still a private business conversation. If you record it secretly and then share the transcript with your team, you have not kept it purely personal. You have created copies, expanded access, created witnesses, and made the recording part of your company workflow.

That matters because some states require all parties to consent before a confidential conversation is recorded. California is the state I would treat with the most caution. California Penal Code § 632 prohibits intentionally recording a confidential communication without the consent of all parties, and defines confidential communication broadly enough to cover situations where a party reasonably wants the conversation confined to the participants.

The statute also says evidence obtained through an unlawful recording is generally not admissible in proceedings, except to prove the recording-law violation itself. In other words, a bad recording can fail as evidence while succeeding as evidence against you.

The Texas-to-California mistake

A common mistake is to think: “I am in Texas, and Texas is more permissive, so I can record.”

That may be the wrong frame when the other person is in California. In Kearney v. Salomon Smith Barney, the California Supreme Court addressed out-of-state business calls with California clients. The court treated California’s privacy interest as strong enough that an out-of-state business could not simply rely on a more permissive one-party-consent state rule for calls involving California clients.

The practical lesson is simple: if a customer, user, candidate, collaborator, or partner is in California, act as if California consent rules matter.

The risk is not theoretical

If someone discovers the secret recording, the first consequence may not be a lawsuit. It may be a trust collapse. The customer may demand deletion, ask who saw the transcript, report the issue to your company or university, or refuse to work with you again.

The legal risk can also be real. California Penal Code § 637.2 allows a person injured by a violation to bring a civil action for the greater of $5,000 per violation or three times actual damages. The same section also allows actions to enjoin and restrain violations, and says actual damages are not a necessary prerequisite.

Federal law has a one-party-consent baseline in many cases, but it also prohibits interception and disclosure/use in several circumstances. 18 U.S.C. § 2511 is a reminder that recording rules are not just etiquette. They are legal rules.

A clean customer-interview protocol

The safe protocol is boring, which is the point.

Put the notice in the calendar invite:

We would like to record and transcribe this customer interview for internal product research. The recording and transcript will be shared only with our team. We will not record unless all participants consent.

Then ask again at the start of the call:

Before we begin, I would like to record and transcribe this conversation for internal product research notes. Is everyone comfortable with that?

Wait for a clear yes. The platform’s recording banner helps, but I would not rely on it alone for a high-trust customer interview. Say it out loud. Make the consent part of the recording.

If someone says no, do not argue. Say:

No problem. We will not record. I will take notes and send a written summary afterward so you can correct anything I misunderstood.

That last sentence gives you a record without creating a recording-law problem.

What to do if you already made the mistake

Do not keep circulating the transcript. Do not quote from it in product docs. Do not paste it into your CRM, investor memo, or research report as if nothing happened.

Contain access. Write down who received it. Preserve enough context to understand what happened. If there is any dispute, ask a lawyer before deleting materials, because deletion after a dispute starts can create a separate evidence-preservation problem.

Then fix the process: consent in the invite, consent at the start, limited access, deletion schedule, and a notes-only fallback.

The default rule

For customer discovery, the right default is not “record secretly and hope nobody cares.”

The right default is: ask, get clear consent, and make people feel respected before they tell you the truth.