People tell AI chatbots a lot: health worries, money problems, work documents, family details. Chatbots feel private, like a notebook. They are not. What you type is sent to a company’s servers, may be stored, and, depending on your settings, may be used to improve future AI models. Here is what to know before you share.
What can happen to what you type
- It is stored. Most services keep your conversation history so you can come back to it. Even deleted chats may be kept for a period for safety and legal reasons.
- It may be used for training. Many consumer AI services can use conversations to improve their models unless you opt out. Business and paid plans often have different, stricter defaults.
- People may review it. Some providers have staff or contractors review samples of conversations to improve quality or check for abuse.
- It can be connected to other data. When you link email, files or photos to an AI assistant, that data can be used in new ways. Google’s recent policy change, which lets data from connected apps shape the ads you see, is a good example.
The exact rules differ between services and change over time, so check the privacy settings of the tools you actually use.
Never share these with a chatbot
- Passwords, PINs and one-time codes
- Full card numbers, bank details and government ID numbers
- Medical records or test results with your name on them
- Other people’s private information without their permission
- Confidential work documents, unless your employer has approved the tool
If you need help with a document that contains personal details, remove names, numbers and addresses first, or replace them with placeholders like “[Name]”.
Privacy settings worth checking today
- Training opt-out: look in settings for something like “Improve the model for everyone” or “Use my data for training”, and turn it off if you prefer.
- Chat history: see how long chats are kept, and whether there is a temporary or incognito chat mode for sensitive questions.
- Connected apps: review which accounts the assistant can access (email, drive, calendar, photos) and remove the ones you do not need.
- Memory: some assistants remember facts about you across chats. Check what they have stored and delete anything you would rather they forget.
Agents raise the stakes
AI agents that act for you need real access to your accounts. That makes good habits more important: give the smallest access that works, require approval for payments and messages, and never paste passwords into a chat. Our explainer on what AI agents are covers this in more detail.
On-device AI is more private
Some AI features now run directly on your phone or computer instead of in the cloud, which means your data does not have to leave your device. Read on-device vs cloud AI to understand when that applies.
A simple rule
Before you hit send, ask: “Would I be comfortable if this message were stored on a company’s server for years?” If the answer is no, remove the personal details or do not send it. Chatbots are powerful helpers; they are just not the place for secrets.