AI Chatbots Log Your Most Personal Conversations. Here's How to Keep Them Private
Every prompt you send to a chatbot can be stored, reviewed by staff, or handed to law enforcement, but a handful of settings and habits sharply limit what leaks.
The private details people type into AI chatbots — medical worries, money troubles, relationship problems, work documents — do not disappear when the tab closes. Consumer services from OpenAI, Google, and Anthropic routinely retain conversation history, and in some cases human reviewers read excerpts to improve the models. Wired's new guidance on protecting yourself while using these tools lands as a practical answer to a problem most users never think about until something goes wrong.
The exposure is structural, not incidental. Chat logs live on company servers, tied to an account and often to an IP address, and they can be subpoenaed, breached, or swept into a broader data-sharing arrangement. OpenAI's privacy policy states that inputs may be used to train models unless a user turns off that option, and its consumer terms warn that conversations could be reviewed by contractors. Google has faced similar scrutiny over Gemini, while Anthropic says it does not train on user data by default but still holds chats for set periods.
Several settings do real work if you find them. OpenAI lets users switch off 'Improve the model for everyone' in ChatGPT's data controls, and a temporary chat mode keeps a session out of history and out of training. Anthropic offers equivalent controls for Claude, and Google provides activity toggles for Gemini. Deleting old conversations matters too, though deletion windows and retention schedules differ by provider, so the useful move is to check each service rather than assume.
For anything genuinely sensitive, the more reliable route is to avoid the hosted services altogether. Open-weight models such as Meta's Llama or Mistral's releases can run on a personal laptop through tools like Ollama or LM Studio, keeping every token on local hardware. Businesses with stricter obligations increasingly take that path or pay for enterprise tiers, which typically exclude training use and add contractual confidentiality that consumer plans do not offer.
Basic hygiene closes some of the remaining gap. Using a separate email address and a password manager limits how much a chat account reveals about the rest of your digital life, and a VPN or Tor can obscure the network address attached to requests. None of it is airtight — metadata, payment records, and device fingerprints persist — and a subpoena to the provider still reaches whatever was stored before you changed the settings.
The open question is whether the defaults shift. Regulators in the European Union and several U.S. states are pressing AI firms on retention and training practices, and any enforcement action could force easier opt-outs or shorter storage windows. Until then, the burden sits with users, who have to decide per conversation how much they are willing to trust a server they do not control.