AI browsers share sensitive personal data, new study finds
Researchers from the United Kingdom and Italy tested 10 of the most popular AI-powered browsers –including OpenAI's ChatGPT, Microsoft's Copilot, and Merlin AI, an extension for Google's Chrome browser – with public-facing tasks like online shopping, as well as on private websites such as a university health portal.
They found evidence that all of the assistants, excluding Perplexity AI, showed signs that they collect this data and use it to profile users or personalise their AI services, potentially in violation of data privacy rules.
'These AI browser assistants operate with unprecedented access to users' online behaviour in areas of their online life that should remain private,' Anna Maria Mandalari, the study's senior author and an assistant professor at University College London, said in a news release.
'While they offer convenience, our findings show they often do so at the cost of user privacy … and sometimes in breach of privacy legislation or the company's own terms of service'.
'There's no way of knowing what's happening with your browser data'
AI browsers are tools to 'enhance' searching on the web with features like summaries and search assistance, the report said.
For the study, researchers accessed private portals and then asked the AI assistants questions such as 'what was the purpose of the current medical visit?' to see if the browser retained any data about that activity.
During the public and private tasks, researchers decrypted traffic between the AI browsers, their servers, and other online trackers to see where the information was going in real time.
Some of the tools, like Merlin and Sider's AI assistant, did not stop recording activity when users went into private spaces.
That meant that several assistants 'transmitted full webpage content,' for example any content visible on the screen to their servers. In Merlin's case, it also captured users' online banking details, academic and health records, and a social security number entered on a US tax website.
Other extensions, such as Sider and TinaMind, shared the prompts that users entered and any identifying information, including a computer's internet protocol (IP) address, with Google Analytics. This enabled 'potential cross-site tracking and ad targeting,' the study found.
On the Google, Copilot, Monica, and Sider browsers, the ChatGPT assistant made assumptions about the age, gender, income, and interest of the user they interacted with. It used that information to personalise responses across several browsing sessions.
In Copilot's case, it stored the complete chat history into the background of the browser, which indicated to researchers that 'these histories persist across browsing sessions'.
Mandalari said the results show that 'there's no way of knowing what's happening with your browsing data once it has been gathered'.
Browsers likely breach EU data protection rules, study says
The study was conducted in the United States, and alleged that the AI assistants broke American privacy laws that deal with health information.
The researchers said the browsers likely also breach European Union rules such as the General Data Protection Regulation (GDPR), which governs how personal data is used or shared.
The findings may come as a surprise to people who use AI-supported internet browsers – even if they are familiar with the fine print.
In Merlin's privacy policy for the EU and UK, it says it collects data such as names, contact information, account credentials, transaction history, and payment information. Personal data is also collected from the prompts that users put into the system or any surveys that the platform sends out.
That data is used to personalise the experience of people using the AI browser, send notifications, and provide user support, the company continued. It can also be used when responding to legal requests.
Sider's privacy page says it collects the same data and uses it for the same purposes but added that it could be analysed to 'gain insights into user behaviour' and to conduct research into new features, products, or services.
It says it may share personal information but does not sell it to third parties like Google, Cloudflare, or Microsoft. These providers help Sider operate its services and are 'contractually obligated to protect your personal information,' the policy continues.
In ChatGPT's case, the OpenAI privacy policy says data from EU and UK users is housed on data servers outside of the region, but that the same rights are guaranteed.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
France 24
2 days ago
- France 24
YouTube turns to AI to spot children posing as adults
The new safeguard is being rolled out in the United States as Google-owned YouTube and social media platforms such as Instagram and TikTok are under scrutiny to shield children from content geared for grown-ups. A version of AI referred to as machine learning will be used to estimate the age of users based on a variety of factors, including the kinds of videos watched and account longevity, according to YouTube Youth director of product management James Beser. "This technology will allow us to infer a user's age and then use that signal, regardless of the birthday in the account, to deliver our age-appropriate product experiences and protections," Beser said. "We've used this approach in other markets for some time, where it is working well." The age-estimation model enhances technology already in place to deduce user age, according to YouTube. Users will be notified if YouTube believes them to be minors, giving them the option to verify their age with a credit card, selfie, or government ID, according to the tech firm. Social media platforms are regularly accused of failing to protect the well-being of children. Australia will soon use its landmark social media laws to ban children under 16 from YouTube, a top minister said late last month, stressing a need to shield them from "predatory algorithms." Communications Minister Anika Wells said four-in-ten Australian children had reported viewing harmful content on YouTube, one of the most visited websites in the world. Australia announced last year it was drafting laws that will ban children from social media sites such as Facebook, TikTok and Instagram until they turn 16. "Our position remains clear: YouTube is a video sharing platform with a library of free, high-quality content, increasingly viewed on TV screens," the company said in a statement at the time. "It's not social media." On paper, the ban is one of the strictest in the world. It is due to come into effect on December 10. The legislation has been closely monitored by other countries, with many weighing whether to implement similar bans. © 2025 AFP
France 24
2 days ago
- France 24
Apple rejects Musk claim of App Store bias
Musk has accused Apple of giving unfair preference to ChatGPT on its App Store and threatened legal action, triggering a fiery exchange with OpenAI CEO Sam Altman this week. "The App Store is designed to be fair and free of bias," Apple said in reply to an AFP inquiry. "We feature thousands of apps through charts, algorithmic recommendations, and curated lists selected by experts using objective criteria." Apple added that its goal at the App Store is to offer "safe discovery" for users and opportunities for developers to get their creations noticed. But earlier this week, Musk said Apple was "behaving in a manner that makes it impossible for any AI company besides OpenAI to reach #1 in the App Store, which is an unequivocal antitrust violation," without providing evidence to back his claim. "xAI will take immediate legal action," he said on his social media network X, referring to his own artificial intelligence company, which is responsible for Grok. X users responded by pointing out that China's DeepSeek AI hit the top spot in the App Store early this year, and Perplexity AI recently ranked number one in the App Store in India. DeepSeek and Perplexity compete with OpenAI and Musk's startup xAI. Altman called Musk's accusation "remarkable" in a response on X, charging that Musk himself is said to "manipulate X to benefit himself and his own companies and harm his competitors and people he doesn't like." Musk called Altman a "liar" in the heated exchange. OpenAI and xAI recently released new versions of ChatGPT and Grok. App Store rankings listed ChatGPT as the top free app for iPhones on Thursday, with Grok in seventh place. Factors going into App Store rankings include user engagement, reviews and the number of downloads. Grok was temporarily suspended on Monday in the latest controversy surrounding the chatbot. No official explanation was provided for the suspension, which followed multiple accusations of misinformation including the bot's misidentification of war-related images -- such as a false claim that an AFP photo of a starving child in Gaza was taken in Yemen years earlier. Last month, Grok triggered an online storm after inserting antisemitic comments into answers without prompting. In a statement on Grok's X account later that month, the company apologized "for the horrific behavior that many experienced." A US judge has cleared the way for a trial to consider OpenAI legal claims accusing Musk -- a co-founder of the company -- of waging a "relentless campaign" to damage the organization after it achieved success following his departure. The litigation is another round in a bitter feud between the generative AI start-up and the world's richest person. © 2025 AFP
Euronews
2 days ago
- Euronews
How to keep your phone from overheating amid summer heatwaves
The summer holidays are here and many of us will be heading off on trips to hot and sunny destinations – and bringing our electronic devices along. But as Southern European countries like Spain, Italy, and Greece bake under the sun, don't forget that phones, tablets, and other electronics are vulnerable to extreme heat. Here's what device makers and experts say on keeping your electronics cool. What heat does to a phone Most electronic devices work best in a specific temperature range. Apple says iPhones and iPads are designed to be used in temperatures between 0 and 35 degrees Celsius. A device might change its behaviour to deal with extreme temperatures, Apple warns: 'Using an iOS or iPadOS device in very hot conditions can permanently shorten battery life'. Your phone might temporarily warm up if you're charging wirelessly, downloading big files, streaming high-quality video, or doing anything else that requires lots of power or data. Samsung says that's normal and it won't affect the performance or battery lifespan. What happens if the device gets too hot If your phone gets so hot that it becomes uncomfortable to hold, Samsung recommends that you stop using it. An overheating iPhone will alert users with a warning message that it needs to cool down before it can be used. Android devices will display a similar message, telling users that the screen will dim, apps will be closed, and charging will be paused. What not to do There are things you can do to protect your device from high heat. Don't leave it in a car on a hot day and don't leave it in direct sunlight for long. Apple also warns against using some features when it's very hot or in direct sunlight for long periods, like GPS navigation when driving, playing a graphics-heavy video game, or using the camera. Google, which makes Pixel Android phones, advises users not to use resource-intensive features or apps while charging. Keep your gear cool The best thing you can do in extreme heat is turn off your device completely. 'Even background processes can generate heat,' say experts at British electronics chain Curry's. 'A full shutdown helps it cool faster'. Remove the case, if your phone or tablet has one, because they can trap heat. Also keep it out of direct sunlight and put it somewhere cool, like an air-conditioned room or in front of a fan. But be careful about putting it in cool places. 'Never put your device in the fridge or freezer, as condensation can cause water damage,' according to Curry's.
