DeepSeek, a Chinese AI chatbot similar to OpenAI’s ChatGPT, is now the most downloaded free app in the U.S. However, its rapid rise has sparked major privacy concerns—especially as the U.S. moves to ban TikTok over its ties to the Chinese government.
Like most apps, DeepSeek requires users to accept its privacy policy upon signup—yet few actually read it. Cybersecurity expert Adrianus Warmenhoven from NordVPN warns that DeepSeek’s privacy policy, available in English, explicitly states that user data, including chat history, is stored on servers in China. This raises serious concerns, given China’s different privacy laws and the potential for government access to this data.
What Data Does DeepSeek Collect?
DeepSeek gathers information in three primary ways:
1. Information You Provide:
- Personal details: Name, email, phone number, date of birth, username, password
- Conversations: Chat history, text/audio inputs, feedback, uploaded files
- Customer support: ID verification, inquiries, and feedback
2. Automatically Collected Data:
- Device information: Model, OS, system language, diagnostic data
- Keystroke patterns or rhythms: Similar to TikTok’s biometric tracking
- Internet activity: IP address, cookies, usage behavior
- Payment details: For subscriptions or transactions
3. Information from External Sources:
- Linked accounts: Google, Apple sign-in
- Ad partners: Purchase history and user interactions
Keystroke Tracking: A Hidden Concern?
DeepSeek’s privacy policy mentions collecting “keystroke patterns or rhythms.” While this may sound like keylogging, similar practices are used for biometric identification. TikTok has claimed it only tracks typing patterns for authentication purposes, but DeepSeek has not clarified how it uses this data.
Nicky Watson, co-founder of Syrenis, highlights the risks of biometric tracking, including identity theft and fraud. Unlike passwords, biometric data cannot be reset, making misuse far more dangerous. Compounding this issue is China’s cybersecurity laws, which require tech firms to cooperate with national intelligence.
How DeepSeek Uses Your Data
DeepSeek states that it uses collected data to:
- Improve services and AI models
- Personalize ads and user experience
- Comply with legal obligations or “public interest” concerns
- Share data within its corporate network and with law enforcement
A WIRED investigation found that DeepSeek shares data with Baidu and Chinese infrastructure firm Volces. Additionally, user prompts may contribute to training future AI models, raising further privacy issues.
Why Should You Be Concerned?
Ignoring privacy policies is easy, but doing so can be risky. Since DeepSeek operates under China’s cybersecurity laws, the government can demand access to user data at any time. There is also little transparency about how AI models process and use the information they collect.
Beyond surveillance concerns, users also face cybersecurity threats. Data breaches and leaks could expose sensitive user information, including financial details. Just recently, DeepSeek suffered large-scale cyberattacks, leading the company to restrict new sign-ups.
Protecting Your Privacy: What Can You Do?
Experts suggest users take proactive steps to safeguard their data:
- Read privacy policies before using AI platforms
- Limit the amount of personal information shared with chatbots
- Use a VPN for added security and anonymity
- Avoid linking third-party accounts to AI services
However, individual action is not enough. Stronger global data privacy laws are necessary to hold companies accountable—whether they operate in China, the U.S., or elsewhere. F. Mario Trujillo from the Electronic Frontier Foundation argues that user data should be protected by default, preventing unnecessary sharing or exploitation.
As AI tools continue to grow in popularity, ensuring privacy and security should be a top priority. Before using DeepSeek, ask yourself: How much personal information are you willing to risk?
