A method implemented using one or more processors, comprising: operating an interactive assistant software module on a first computing device to engage in a spoken natural language dialog between a first individual and the interactive assistant software module, wherein the interactive assistant software module is configured to interpret a semantic meaning of a natural language input provided during the spoken natural language dialog and perform one or more responsive operations; determining that the spoken natural language dialog is audible to at least a second individual, wherein the determining includes determining, based on one or more signals, that the second individual is co-present with the first computing device; identifying restricted content to be output by the interactive assistant software module in response to natural language input provided by the first or second individual, wherein access to the restricted content is controlled by the first individual; providing , on a graphical user interface rendered on a second computing device, a prompt seeking authorization from the first individual for the interactive assistant software module to output the restricted content; receiving , at the second computing device, a response to the prompt seeking authorization for the interactive assistant software module to output the restricted content; conditionally outputting , by the interactive assistant software module, the restricted content based on the response authorizing the interactive assistant software module to output the restricted content; and conditionally outputting , by the interactive assistant software module, an unrestricted content as a substitute for the restricted content based on the response not authorizing the interactive assistant software module to output the restricted content. operating an interactive assistant software module on a first computing device to engage in a spoken natural language dialog between a first individual and the interactive assistant software module, wherein the interactive assistant software module is configured to interpret a semantic meaning of a natural language input provided during the spoken natural language dialog and perform one or more responsive operations; determining that the spoken natural language dialog is audible to at least a second individual, wherein the determining includes determining, based on one or more signals, that the second individual is co-present with the first computing device; identifying restricted content to be output by the interactive assistant software module in response to natural language input provided by the first or second individual, wherein access to the restricted content is controlled by the first individual; providing , on a graphical user interface rendered on a second computing device, a prompt seeking authorization from the first individual for the interactive assistant software module to output the restricted content; receiving , at the second computing device, a response to the prompt seeking authorization for the interactive assistant software module to output the restricted content; conditionally outputting , by the interactive assistant software module, the restricted content based on the response authorizing the interactive assistant software module to output the restricted content; and conditionally outputting , by the interactive assistant software module, an unrestricted content as a substitute for the restricted content based on the response not authorizing the interactive assistant software module to output the restricted content. <EOS>