DeepSeek, a Chinese AI chatbot similar to OpenAI’s ChatGPT, has rapidly become the most downloaded free app in the U.S. However, its meteoric rise is accompanied by significant privacy concerns—especially as the U.S. moves to ban TikTok due to its ties to the Chinese government.
Like most AI apps, DeepSeek requires users to accept its privacy policy, but few take the time to read it. According to cybersecurity expert Adrianus Warmenhoven from NordVPN, “DeepSeek’s privacy policy clearly states that user data, including conversations and responses, is stored on servers in China.” This raises major concerns about data security, given China’s strict cybersecurity laws, which could allow government access to this information.
What Data Does DeepSeek Collect?
DeepSeek gathers an extensive range of data, categorized as follows:
1. Information You Provide:
- Profile details (name, email, phone number, date of birth, password)
- Conversations, uploaded files, and chat history
- Identity verification details if requested
2. Automatically Collected Information:
- Device details (model, operating system, IP address)
- Internet activity (cookies, user behavior, keystroke patterns)
- Diagnostic and performance data
3. Information from Other Sources:
- Linked accounts (Google, Apple)
- Advertising partners’ data, including past purchases
Keystroke Tracking: A Cause for Concern?
DeepSeek’s privacy policy states it collects “keystroke patterns or rhythms,” a biometric tracking method also used by TikTok but not by Instagram. While TikTok claims this is purely for user authentication rather than keylogging, experts warn that biometric tracking raises concerns about identity security.
Nicky Watson, co-founder of consent management platform Syrenis, warns that biometric data, unlike passwords, cannot be reset or revoked if compromised. Given that DeepSeek’s data is stored in China, where companies must comply with national intelligence operations, privacy advocates fear potential misuse.
How Does DeepSeek Use Your Data?
DeepSeek states that collected data is used for:
- Personalizing user experiences and targeted advertising
- Notifying users of service updates
- Fulfilling legal obligations and compliance with public interest laws
- Sharing data with its corporate affiliates and, if necessary, law enforcement
Security experts highlight that the policy grants DeepSeek broad discretion over data usage, leaving users vulnerable to potential exploitation. Investigations by WIRED indicate that DeepSeek shares data with Chinese tech giants like Baidu and Volces and may even use user interactions to train future AI models.
Why Should You Be Concerned?
Many users overlook the importance of data security, but ignoring privacy risks could be dangerous. Under China’s cybersecurity laws, companies must provide government access to stored data upon request. With AI technology advancing rapidly, the potential for cyber threats, identity theft, and data breaches is greater than ever.
Beyond theoretical risks, DeepSeek recently faced large-scale cyberattacks, forcing it to limit new registrations. Cybercriminals frequently target AI-driven platforms, exploiting stored user data for malicious purposes.
What Can You Do to Protect Your Data?
Experts urge users to be proactive about cybersecurity:
- Review privacy policies before using new platforms
- Use strong passwords and enable two-factor authentication
- Limit data sharing by avoiding unnecessary app permissions
- Monitor account activity for unusual login attempts
However, privacy should not be solely the user’s responsibility. Legal experts advocate for stronger data protection laws that would apply to AI platforms globally. As F. Mario Trujillo from the Electronic Frontier Foundation puts it, “When you type intimate thoughts into a chatbot, that data should be protected, not exploited.”
Final Thoughts
While DeepSeek may offer a compelling AI experience, its data collection practices should not be ignored. Whether stored in China or elsewhere, user data deserves robust privacy protections. The question remains: are you comfortable with what DeepSeek knows about you?
