- cross-posted to:
- privacy@lemmy.dbzer0.com
- cross-posted to:
- privacy@lemmy.dbzer0.com
A chart titled “What Kind of Data Do AI Chatbots Collect?” lists and compares seven AI chatbots—Gemini, Claude, CoPilot, Deepseek, ChatGPT, Perplexity, and Grok—based on the types and number of data points they collect as of February 2025. The categories of data include: Contact Info, Location, Contacts, User Content, History, Identifiers, Diagnostics, Usage Data, Purchases, Other Data.
- Gemini: Collects all 10 data types; highest total at 22 data points
- Claude: Collects 7 types; 13 data points
- CoPilot: Collects 7 types; 12 data points
- Deepseek: Collects 6 types; 11 data points
- ChatGPT: Collects 6 types; 10 data points
- Perplexity: Collects 6 types; 10 data points
- Grok: Collects 4 types; 7 data points
You must log in or register to comment.
Who would have guessed that the advertising company collects a lot of data
And I can’t possibly imagine that Grok actually collects less than ChatGPT.
Data from surfshark aka nordvpn lol. Take it with a few chunks of salt
Yeah I feel like there’s a supposedly missing somewhere. We don’t know their servers so at the very least ‘user content’ is based on trust.
Skill issue probably. They want to collect more but Musk’s shitty hires can’t figure it out. /s
Who TF using Grok.
Fascists. Why?
Most of my workforce strangely enough. They claim it’s the best for them in terms of mathematics, but I can’t find that to be a good reason.
Isn’t deepseek better for that?
That’s what I’m saying!
In my experience it depends on the math. Every model seems to have different strengths based on a wide berth of prompts and information.
I’m interested in seeing how this changes when using duck duck go front end at duck.ai
there’s no login and history is stored locally (probably remotely too)
Aren’t they supposed to collect data?
Note this is if you use their apps. Not the api. Not through another app.
Not that we have any real info about who collects/uses what when you use the API
Yeah we do, they list it in privacy policies. Many of these they can’t really collect even if they wanted to
anyone whos competent in the matter: what about the french competition chat.mistral.ai
+1 for Mistral, they were the first (or one of the first) Apache open source licensed models. I run Mistral-7B and variant fine tunes locally, and they’ve always been really high quality overall. Mistral-Medium packed a punch (mid-size obviously) but it definitely competes with the big ones at least.
DeepSeek at home: None
How much VRAM does your machine have? Are you using open webui?
Doesn’t the official local app still have telemetry? I might be remembering wrong
You just use the model in an opensource program, not theirs.
How?
There’s programs like Ollama and Lmstudio that let you download LLMs and run them locally
Also llama.cpp, kobold.cpp, TabbyAPI, Aphrodite engine. There’s dozens of programs, at least, that run LLMs locally.
Or you could use Deepseek’s workaround and run it locally. You know, open source and all.
Is there away to fake all the data they try to collect?
I just came across this article which for people who are into self hosting can take a look and participate. It’s basically a tool that generating never ending web pages with non sense that load slow (but not too slow the AI tools move on) to slow down and thus cost them more to scrape the internet if enough people are doing it. You can also hide it in a way that legit user would never see this on your site:
https://arstechnica.com/tech-policy/2025/01/ai-haters-build-tarpits-to-trap-and-trick-ai-scrapers-that-ignore-robots-txt/ https://zadzmo.org/code/nepenthes/
Pretty sure this is what they scrape from your device if you install their app. I dont know how else they would get access to contacts and location and stuff. So yeah you can just run it on a virtual android device and feed it garbage data, but i assume the app or their backend will detect that and throw out your data.
Root, install xprivacy (or xprivacylua if your phone isn’t 10 years old).
How about if I only use the web version?
Almost none of this data is possible to collect when using Tor Browser
Nope, these services almost always require user login, eventually tied to cell number (ie non disposable) and associate user content and other data points with account. Nonetheless user prompts are always collected. How they’re used is a good question.
Use a third party API. Pay with monero.
Yes it is possible to create disposable-isque api keys for different uses. The monetary cost is the cost of privacy and of not having hardware to run things locally.
If you have reliable privacy friendly api vendor suggestions then do share. While I do not need such services now, it can a good future reference.
I think I only used chatgpt once to play around, and it was one of those. I dont remember the name, sorry
And what about goddamn Mistral?
Its French as far as I know so at least it abides to gdpr by default.
All services you see above are provided to EU citizens, which is why they also have to abide by GDPR. GDPR does not disallow the gathering of information. Google, for example, is GDPR compliant, yet they are number 1 on that list. That’s why I would like to know if European companies still try to have a business case with personal data or not.
It doesn’t mean they “have to abide by GDPR” or that they “are GDPR compliant”. All it means is they appear to be GDPR compliant and pretend to respect user privacy. The sole fact that the AI chatbots are run in US-based data centres is against GDPR. The EU has had many different personal data transfer agreements with the US, all of which were canceled shortly after signing due to US corporations breaking them repeatedly (Facebook usually being the main culprit).
I tried to say that, but you were better at explaining, so thank you. Without a court case, you will essentially never know, if they are truly GDPR compliant
If it’s one thing I don’t trust its non-EU companies following GDPR. Sure they’re legally bound to, but l mean Meta doesn’t care so why should the rest.
(Yes I’m being overly dramatic about this, but I’ve lost trust ages ago in big tech companies)
Fully agree, which is also why I choose EU/Swiss made services by default
not sure about swiss, they shady as hell if you have scepticism towards rich people greed
I’m only referring to data privacy laws.
Am I missing something? What do the numbers mean in relation to the type? Sub types?
perhaps it’s the limit imof each data type?!
gemini harvests only your first four cobtacts, your last two locations, and so on.
how does one defeat that? have fewer than four friends and don’t go out!
Ask people for their phone number to add to your contacts and give them your phone for a day
It’s labeled “Unique data points”. See the number 2 - Usage Data for Gemini, there’s an arrow with label there.
Thank you I totally missed that.
I’m curious what data t3chat collects. They support all the models and I’m pretty sure they use Sentry and Stripe, but beyond that, who knows?
Anthropic and OpenAPI both have options that let you use their API without training the system on your data (not sure if the others do as well), so if t3chat is simply using the API it may be that they themselves are collecting your inputs (or not, you’d have to check the TOS), but maybe their backend model providers are not. Or, who knows, they could all be lying too.
Me when Gemini (aka google) collects more data than anyone else:
Not really shocked, we all know that google sucks
I would hazard a guess that the only reason those others aren’t as high is because they don’t have the same access to data. It’s not that they don’t want to, they simply can’t (yet).
Which is good (for now). Glad I don’t use that shit
deleted by creator
Just clarifying, does this report mean it’s collected while a user is using the tools, or data that is generally scraped from the internet?
They’re talking about what is being recorded while the user is using the tools (your prompts, RAG data, etc.)
Does that include generated responses?
Nobody knows! There’s no specific disclosure that I’m aware of (in the US at least), and even if there was I wouldn’t trust any of these guys to tell the truth about it anyway.
As always, don’t do anything on the Internet that you wouldn’t want the rest of the world to find out about :)
Did a personal data export for chatGPT and it included the complete conversation, not just my input.
