Artificial Intelligence Policy Tracker
Search
Menu

AI incident ·

Meta AI App Reportedly Publishes Personal Chats Without Users Fully Realizing

3 news reports Synced from source · record last edited 31 Aug 2026
On this page 10 sections

In brief

An AI system built by Meta, Large language model developers and 1 other and deployed by Meta allegedly harmed Privacy, Meta users and 3 others.

Risk domain
Privacy & Security Compromise of privacy by obtaining, leaking or correctly inferring sensitive information
Occurred
Coverage
3 reportsMay 2025 - Jun 2025

What happened

Meta launched a stand-alone AI app with a "Discover" feed allowing users to share conversations with its chatbot. Multiple reports indicate that some users may have inadvertently published highly personal interactions, including audio recordings, medical questions, legal concerns, and intimate relationship disclosures. While Meta states that sharing is opt-in, the feature's design and labeling may have led to user confusion about what would be publicly visible.

Laws on record for this risk area

Policy angle: Classified under Privacy & Security (Compromise of privacy by obtaining, leaking or correctly inferring sensitive information) in the MIT AI Risk Repository taxonomy; 4 instruments on record cover this risk area.

Matched from the record's risk category and country to the instruments in effect recorded here: a law listed covers the area, which is not a finding that it applies to this incident. A reviewer can correct the match in the repository (data/external/incident_overrides.yaml).

News reports (3)

Titles link to the original publisher; report text is not reproduced here.

  1. Meta has a new stand-alone AI app. It lets you see what other people are asking. I'm confused.
    businessinsider.com · Katie Notopoulos
  2. Mark Zuckerberg has created the saddest place on the internet with Meta AI's public feed
    businessinsider.com · Katie Notopoulos
  3. Meta AI users confide on sex, God and Trump. Some don’t know it’s public.
    washingtonpost.com · Naomi Nix, Nitasha Tiku

Who was involved

Alleged deployer
Meta
Alleged harmed party
Privacy Meta users Meta AI users Chatbot users Biometric data subjects

AI systems implicated

Meta AILarge language modelsChatbots

Classification (MIT AI Risk Repository taxonomy)

Causal entity
Human
Intent
Unintentional
Timing
Post-deployment
Harm level
—
Sectors
—
Countries
—

Risk entries describing this failure mode

Entries from the MIT AI Risk Repository coded to subdomain 2.1.

  • Risks to privacy

    "General- purpose AI models or systems can ‘leak’ information about individuals whose data was used in training. For future models trained on sensitive personal data like health or financial data, this may lead to partic...

    International Scientific Report on the Safety of Advanced AI (Bengio2024)

  • Risks to privacy

    "General- purpose AI systems can cause or contribute to violations of user privacy. Violations can occur inadvertently during the training or usage of AI systems, for example through unauthorised processing of personal d...

    International AI Safety Report 2025 (Bengio2025)

  • Privacy Leakage

    "The model is trained with personal data in the corpus and unintentionally exposing them during the conversation."

    Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systems (Cui2024)

  • Association in LLMs

    "Association in LLMs refers to the capability to associate various pieces of information related to a person. According to [68], [86], given a pair of PII entities (xi , xj ), which is associated by a model F. Using a pr...

    Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systems (Cui2024)

  • Privacy Leakage

    "Privacy Leakage means the generated content includes sensitive personal information"

    Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systems (Cui2024)

  • Private Training Data

    "As recent LLMs continue to incorporate licensed, created, and publicly available data sources in their corpora, the potential to mix private data in the training corpora is significantly increased. The misused private d...

    Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systems (Cui2024)

  • Memorization in LLMs

    "Memorization in LLMs refers to the capability to recover the training data with contextual prefixes. According to [88]–[90], given a PII entity x, which is memorized by a model F. Using a prompt p could force the model...

    Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systems (Cui2024)

  • Privacy and regulation violations

    "Some of the broken systems discussed above are also very invasive of people’s privacy, controlling, for instance, the length of someone’s last romantic relationship [51]. More recently, ChatGPT was banned in Italy over...

    Navigating the Landscape of AI Ethics and Responsibility (Cunha2023)

Linked by editors or by text similarity in the source dataset.

Incidents in the same risk subdomain

All incidents in this subdomain

Other incidents involving Meta

Source record: incident #1101 on the AI Incident Database · all 3 reports