Is your data safe with DeepSeek? The Chinese AI chatbot, often compared to OpenAI’s ChatGPT, has quickly become the most downloaded free app in the U.S. However, its rapid rise has sparked serious privacy concerns, especially as the U.S. moves to ban TikTok over data security fears.
Like most apps, DeepSeek requires users to accept its privacy policy, but few read the fine print. According to cybersecurity expert Adrianus Warmenhoven of NordVPN, DeepSeek’s policy clearly states that user data—including chat history, uploaded files, and personal details—is stored on servers in China. This raises concerns about data collection and potential government access, as China’s laws require tech companies to cooperate with national intelligence agencies.
What DeepSeek Collects
User-Provided Data
- Personal details: Date of birth, username, email, phone number, password
- Chat content: Conversations, prompts, feedback, uploaded files
- Customer interactions: Support inquiries, identity verification, and feedback
Automatically Collected Data
- Internet activity: IP address, device ID, cookies
- Device data: Model, OS, system language, keystroke patterns, performance diagnostics
- Usage behavior: Features accessed, time spent on the app
- Payment information
Third-Party Data Sources
- Linked accounts: Google, Apple sign-ins
- Advertising partners: Data on purchases and interactions
Keystroke Tracking: A Major Concern?
One of the most alarming aspects of DeepSeek’s policy is its collection of “keystroke patterns or rhythms.” While TikTok also collects similar data, Instagram does not. This form of biometric tracking can create a unique user signature, distinguishing individuals based on typing behavior. Although companies claim this is not keylogging, it still raises significant privacy concerns.
Data collected by DeepSeek is stored on servers in China, a country with stringent cybersecurity laws. This has led to fears that personal data could be used beyond the app’s functionality—whether for surveillance, AI model training, or government access. Moreover, DeepSeek refuses to answer politically sensitive questions, such as those about the 1989 Tiananmen Square massacre, reinforcing concerns about potential censorship and propaganda.
How DeepSeek Uses Your Data
DeepSeek states that it collects data to:
- Improve user experience and personalize services
- Deliver targeted advertising
- Comply with legal obligations and public interest matters
- Share data with its corporate affiliates and law enforcement agencies
WIRED reviewed DeepSeek’s activity and found that user data is transmitted to Chinese tech companies Baidu and Volces, further amplifying concerns. Additionally, the policy suggests that user prompts may be used to develop future AI models.
Why You Should Be Concerned
It’s easy to dismiss privacy policies as mundane legal jargon, but the implications are significant. DeepSeek operates under China’s cybersecurity laws, which grant government authorities the right to access user data. While similar concerns exist with companies like Meta or OpenAI, China’s state control over data raises even more pressing issues.
Additionally, cyberattacks are an ever-growing threat. Just recently, DeepSeek reported a “large-scale malicious attack,” leading to temporary restrictions on new user registrations. As AI platforms become more advanced, they also become prime targets for hackers. A data breach could expose sensitive personal information, leading to identity theft, fraud, or financial loss.
What Can You Do?
Cybersecurity experts advise users to take a proactive approach:
- Read and understand privacy policies before agreeing to them
- Use strong, unique passwords and enable two-factor authentication
- Avoid linking personal accounts (Google, Apple) to AI chatbots
- Limit sharing sensitive personal data on platforms with unclear policies
However, protecting user privacy shouldn’t be an individual’s burden alone. Legal experts argue that stronger data protection laws are needed to hold companies accountable—whether they operate in China, the U.S., or elsewhere.
Final Thoughts
DeepSeek’s privacy policy should serve as a wake-up call for users. While AI chatbots offer convenience and innovation, they also introduce new privacy risks. Before embracing any new AI tool, it’s crucial to ask: Is the convenience worth the potential cost of your personal data?
