why the hot new Chinese AI chatbot has big privacy and security problems

The tech world is buzzing with the recent release of DeepSeek, a Chinese artificial intelligence (AI) company that’s shaking things up by offering free, accessible AI models that rival established U.S. offerings like ChatGPT. Users are flocking to try out DeepSeek’s AI Assistant, rapidly propelling it to the top of app charts on both iPhone and Android platforms across various countries.

Yet, amidst this excitement, regulatory authorities are raising warnings. U.S. officials are currently looking into the “national security implications” of the app, while Australia’s former cybersecurity minister indicated that security agencies are preparing formal guidelines for users to navigate this new landscape.

What Data Does DeepSeek Collect?

It’s important to examine why such caution surrounds the DeepSeek app. While not considered spyware—meaning it doesn’t collect data covertly—it does explicitly state that it gathers a significant amount of information about users. According to the company’s privacy policy, DeepSeek collects data across three categories:

• Directly Provided Information: This includes personal details such as your name, email address, and any text or files that you input or upload.
• Automatically Collected Information: This encompasses data about your device, your IP address, usage details, cookies, and payment info.
• Information from Third Parties: The app can also access data from services like Apple and Google logins or third-party analytics and advertising companies.

This type of data collection is largely in line with practices adopted by similar AI platforms such as ChatGPT and Claude.

How Does DeepSeek Use Your Information?

DeepSeek claims it utilizes this data for various purposes, including providing services, enforcing its terms, communicating with users, and assessing performance. Notably, the privacy policy includes a broad clause allowing the company to use information to meet legal mandates, serve public interests, or safeguard users’ vital interests.

Additionally, DeepSeek may share collected information with third-party advertisers, analytics firms, law enforcement agencies, and more. The company retains the data for “as long as necessary” for a variety of reasons, which is standard among many modern online services.

Underlying Concerns

The significant concern about DeepSeek largely stems from its Chinese origins, which expose it to both cybercriminal threats and Chinese law. The app stores user information on secure servers located in China, with DeepSeek asserting that it employs “commercially reasonable technical, administrative, and physical security measures” for data protection.

However, China has a reputation as one of the most cybercrime-saturated countries, standing third behind Russia and Ukraine as of a 2024 report. This raises questions about the potential for unauthorized access to user data, despite DeepSeek’s intentions.

Criminal organizations in China have a track record of creating intricate profiles of targets, and allegations exist regarding the Chinese government’s collaboration with these cybercriminal networks. Such activities can lead to targeted phishing attacks that trick users into revealing more sensitive details, such as bank information.

Is DeepSeek Worth the Download?

So, should you take the plunge and download DeepSeek? If you’re tech-savvy and well-versed in online privacy, you might want to give it a shot—but proceed with caution and be mindful of the data you choose to share. On the other hand, if you consider yourself a more casual user who isn’t especially internet-savvy, it may be wise to steer clear. DeepSeek doesn’t necessarily offer anything you can’t find with other chatbots like ChatGPT or Claude, but it does come with potential risks to your data security from Chinese cybercriminals and exposure to local laws.

Moreover, this situation raises questions for governments. While measures to combat scams and cybercrime often focus on banks and social platforms, the rise of chatbots like DeepSeek presents new challenges that need addressing.