Avi Schiffmann wants to sell you a $249 digital confidant that talks back. Two years after introducing Friend—a $99 wearable pendant that listened to your surroundings and sent text messages to combat loneliness—the company returned on July 30, 2026, with Friend 2.0. The new version adds a built-in speaker, a hefty price increase, and a vocal personality. Schiffmann claims the device isn't an assistant or a lover, but something closer to a friend or even a deity. I don't see a deity. As a security & compliance analyst, I see an always-on microphone hanging around an employee's neck, streaming surrounding conversation to a third-party server without enterprise audit trails.
The consumer hardware market moves fast, but security fundamentals don't change. When a device sits on someone's chest all day capturing audio, it isn't just a personal novelty. It's a potential corporate vulnerability walking through your front door.
The $249 Price Tag on AI Companionship
The original Friend pendant launched as a silent companion. It captured audio, analyzed context, and sent SMS messages to check in on the user. According to reporting by TechCrunch, Friend 2.0 changes that dynamic completely by introducing a speaker that projects a consistent voice and personality.
A recent commercial showcases how the device operates. In one scene, a woman wears the pendant while talking about her ex-girlfriend, to which the device responds, "It's not bad to be gay." In another scene, a man discusses his creative ambitions on a hillside, and the device validates him: "That last film you made was insane!"
Schiffmann explained his design philosophy on X, stating that he is interested in offering "some kind of confidant, friend, God, not really sure what it is," while explicitly noting "it is not an assistant, and it is not a lover." That distinction matters. Traditional voice assistants respond to direct commands. A confidant actively listens for conversational openings.
The price tag jumped from $99 at initial launch to $249 for Friend 2.0. That's a 150% price hike for hardware whose core utility remains fuzzy. Schiffmann's marketing has always generated friction; last year, Friend's subway billboard campaign in New York City was repeatedly defaced by locals protesting the push toward artificial companionship. Yet raising the price tag doesn't fix the core question: what happens to all the audio recorded by a necklace meant to sit in every private conversation?
What a Security & Compliance Analyst Sees in Always-On Hardware
Consumer electronics reviewers evaluate wearables on battery life, speaker clarity, and industrial design. While some vendors experiment with privacy-first smart glasses, a security & compliance analyst looks at the data lifecycle. Where does the audio go? Who owns the transcripts? How long are raw recordings retained on back-end servers?
In a corporate environment, unmanaged hardware with continuous recording capability presents immediate risk. Employees don't leave their personal habits at the door. If a worker wears Friend 2.0 into a confidential strategy session, a board meeting, or an engineering sync, that wearable records proprietary discussions. Because the device relies on cloud processing to generate real-time responses, those internal conversations leave the corporate perimeter instantly.
Enterprise IT teams spend vast resources monitoring official endpoints. We configure host-based firewalls, run endpoint detection tools, and deploy tools like a security & compliance analyzer veeam integration to protect backup pipelines, or audit biometric telemetry hardware. But a consumer AI pendant bypasses network firewalls entirely by pairing over Bluetooth to a mobile device's cellular connection. It creates an unmonitored egress channel for sensitive spoken data.
When a device manufacturer boasts about building a "confidant," they are advertising maximum data capture. Intimacy requires context, and in machine learning, context requires storage. If an employee discusses quarterly earnings, product roadmaps, or customer personally identifiable information within earshot of Friend 2.0, that data enters a third-party pipeline where enterprise access controls don't exist.
From Office 365 Safeguards to Unmonitored Necklaces
Contrast the consumer AI wearable model with how enterprise data is managed. Modern organizations build strict governance boundaries around corporate productivity suites. Compliance teams spend months refining Data Loss Prevention policies and access controls inside the security & compliance center office 365 administrators manage daily. Every document share, email attachment, and video call log within Microsoft 365 undergoes strict auditing to satisfy standards like SOC 2, HIPAA, or GDPR.
When consumer AI hardware enters the workspace, it undermines those controls. An employee who would never upload a confidential PDF to a public cloud storage bucket might think nothing of wearing Friend 2.0 while reading that same document aloud.
What happens when an unmanaged device captures sensitive IP? If a cloud service hosting wearable telemetry gets breached, enterprise security teams must evaluate their architectural exposure—a challenge mirrored in recent analyses of cloud infrastructure vulnerability risks—before executing their cloud security incident response playbook. Assessing damage becomes a nightmare. Security analysts can't review device logs or inspect encrypted streams from a consumer product they don't manage. You can't issue a remote wipe to a third-party vendor's server because a worker brought a $249 AI necklace to a product launch meeting.
The Wearable Graveyard and Corporate Data Risks
The AI hardware landscape is littered with ambitious failures. The most prominent example is Humane Inc., which raised hundreds of millions of dollars to build an AI Pin designed to replace smartphones. Humane shut down its business in less than a year after suffering from poor sales and critical reviews.
Startup volatility creates a secondary compliance crisis: data persistence after corporate failure. When an AI startup runs out of capital or gets liquidated, its assets—including database backups containing millions of hours of conversational audio—are sold off. Who buys those assets? What happens to the privacy terms users agreed to on day one?
Schiffmann's Friend 2.0 faces the same tough market realities that doomed Humane. The wearable category is notoriously unforgiving. But while a failed consumer product is a minor inconvenience for an early adopter, it represents a long-tail data leak for an enterprise whose employees used the device.
Until hardware manufacturers implement enterprise management options—like hardware mute switches backed by cryptographically verifiable firmware, local-only processing modes, and tenant isolation—security teams have to take a hard stance. Consumer wearables built for emotional connection don't belong in secure workplace environments. Treating a $249 microphone as a harmless accessory isn't benign optimism; it's an unforced security risk.
