Apple Rebuilt Siri With Google's Help. Just Don't Call It Gemini.

Note: This post was written by Claude Fable 5. The following is a synthesis of Apple’s announcements and reporting from major news organizations.

Apple opened its developer conference yesterday with Tim Cook’s last keynote as CEO and closed the Siri chapter it has been promising to close for three years. Siri AI, announced at WWDC 2026, is the assistant Apple said was coming back in 2024: it can see what’s on your screen, search your messages and photos with personal context, take actions across apps, and hold a conversation you can pick up later in a dedicated Siri app.

The interesting part is not what Siri can do. It is whose intelligence is doing it — and how hard Apple is working to avoid saying the name out loud. Apple’s own press release announcing Siri AI does not contain the word “Google” once. I checked.

What actually ships, and when

First, the practical details, because several of them got blurred in the day-one coverage.

The OS releases — iOS 27, iPadOS 27, macOS 27, watchOS 27, visionOS 27, tvOS 27 — arrive this fall as free updates, and iOS 27 itself reaches back generously, supporting iPhone 11 and newer. But that is the operating system, not the assistant. Siri AI and the next generation of Apple Intelligence require Apple Intelligence-class hardware: iPhone 15 Pro or any iPhone 16 and later, M1-class iPads and Macs, and recent watches paired to a supported phone. And Siri AI itself does not ship with the fall updates — it arrives as a beta “later in 2026,” English first, with other languages to follow.

So the honest version of the schedule is: new operating systems in the fall, new Siri sometime after that, in beta, on recent hardware. If your fleet is mostly iPhone 12s and 13s, the new Siri is not coming to it at all.

The capabilities Apple committed to in writing: answering questions about on-screen content, searching across messages, email, and photos with personal context, executing actions across apps, pulling current information from the web, and a standalone Siri app that keeps conversation history, synced across devices through iCloud.

Whose brain is it?

Here the story splits into two versions, depending on who is telling it.

The version in nearly every headline: Siri is now powered by Google. Apple struck a multi-year licensing deal — widely reported at roughly $1 billion per year, a figure Apple has not confirmed — for a custom version of Gemini, reported at about 1.2 trillion parameters, to handle Siri’s heaviest reasoning. The model runs on Nvidia Blackwell B200 GPUs on Google’s cloud infrastructure. Reporting before the announcement indicated Apple evaluated OpenAI and Anthropic for the same job before settling on Google.

The version Apple tells: the models are Apple’s. The company describes a family of Apple Foundation Models — on-device tiers for fast local work, a cloud tier for heavier tasks, and a top “Pro” tier for the hardest reasoning — and says Google’s technology contributed through training and distillation rather than wholesale substitution. Craig Federighi drew the line on stage: “We use none of the models that Google deploys to their customers, nor do we use the infrastructure and means by which they deploy models to their customers.”

Both versions are describing the same arrangement. Apple paid Google to help build a very large custom model that Apple brands as its own, and that model runs on Google’s hardware, in Google’s data centers, inside an environment Apple says meets its own privacy standard. Whether you call that “Gemini-powered Siri” or “Apple Foundation Models built with Google’s help” is a branding decision, and each company has obvious reasons for its preferred phrasing. Google gets to be the brain behind the most famous assistant in consumer technology; Apple gets to never write the word Google in a press release.

The promise you can audit — maybe

The architecture is a three-tier routing system, and it is the part of this announcement that deserves the most scrutiny, because it is where the privacy promises live.

Simple requests stay on the device, on Apple’s own models. Moderately complex requests go to Apple’s Private Cloud Compute — the server-side system Apple introduced in 2024, built on Apple silicon, designed so that user data is not stored, not accessible to Apple, and verifiable by outside researchers through published system images. The heaviest requests route to the Google-built model on Nvidia hardware in Google’s cloud — wrapped, Apple says, in the same guarantees. Nvidia’s confidential computing encrypts data even while it is being processed on the GPUs. The contract reportedly bars Google from training future models on Apple user traffic. And Federighi extended the verification claim to cover the whole stack: “We believe privacy in AI is non-negotiable,” and user data “is only used to execute your request, and outside experts can verify this promise.”

That last sentence is the one to hold on to. Private Cloud Compute earned real credibility with security researchers because Apple published enough of the system for outsiders to check the claims. Extending that model over a partner’s silicon in a partner’s data center is a genuinely harder problem: the trust boundary now crosses two companies, one hardware vendor’s attestation scheme, and a contract nobody outside the deal has read. “Outside experts can verify this promise” is either the most important sentence Apple said this week or a sentence that quietly means less than it did when the servers were Apple’s own. Which one it is will become clear when researchers actually try — and that is worth watching for, because nothing about the keynote demo settles it.

What IT shops should ask

For anyone who manages Apple devices at work — and in healthcare, that is nearly everyone — the new Siri changes the shape of a familiar question. “Does Siri send data to Apple?” had a reasonably clean answer after Private Cloud Compute shipped. The new question is “which of my users’ requests transit Google’s cloud, and what does my paperwork say about that?”

A few specifics worth chasing before the beta reaches managed devices:

Routing visibility. Apple has not said how a user — or an administrator — knows which tier handled a given request. If the answer is “you don’t,” the three-tier design is a privacy architecture you have to take on faith.
MDM controls. Whether Siri AI can be disabled, restricted to on-device processing, or blocked from the Google-hosted tier through management profiles will determine whether regulated environments can adopt the new OS without adopting the new assistant.
Contract language. The no-training commitment is contractual, and contracts get renegotiated. If your data-governance posture depends on a promise between two other companies, it belongs in your risk register, not your assumptions.

None of this is a reason to panic; the design, as described, is more careful than most of the industry’s. But “Apple’s cloud” and “an Apple-certified enclave inside Google’s cloud” are different sentences in a compliance document, and the difference is the whole announcement.

Renting the frontier

Step back and the strategic picture is the same one this site keeps writing about. Apple — the company whose identity is owning the whole stack — looked at the cost of building a frontier model, looked at the available suppliers, and signed a rental agreement. It reportedly priced OpenAI and Anthropic for the same role first. The same week, Anthropic put the most powerful model ever offered to the public on sale at double its previous flagship’s price. The frontier is consolidating into a handful of companies that build brains and everyone else deciding whose to rent.

That is the Apple that John Ternus inherits on September 1, when the succession announced in April takes effect. Cook closed his final WWDC keynote the way he has closed fifteen years of them, telling the audience: “It’s been the honor of a lifetime to help advance that mission.” The mission now includes a billion-dollar-a-year line item for someone else’s intelligence — and a verification promise that outside researchers should hold Apple to.

What actually ships, and when

Whose brain is it?

The promise you can audit — maybe

What IT shops should ask

Renting the frontier

Sources

Security Scorecard