Federated learning trains a shared model across many devices without collecting their data on a server. That is a real and useful property. It is also routinely stated as though it were three properties, and the other two — that the server learns nothing about individuals, and that the resulting model cannot leak training data — are not true unless you add machinery that costs something. The protocol, step by step The canonical algorithm is federated averaging. One round looks li...