DeepSeek, a Chinese AI chatbot similar to OpenAI’s ChatGPT, has quickly become the most downloaded free app in the U.S. However, its meteoric rise has ignited privacy concerns, especially as the U.S. moves to ban TikTok over its Chinese government ties.
Like most apps, DeepSeek requires users to accept its privacy policy before access. But how many people actually read the fine print? Cybersecurity experts warn that DeepSeek stores user data—including chat history and personal information—on servers in China, where privacy and security laws differ significantly from those in the U.S.
What Data Does DeepSeek Collect?
DeepSeek’s privacy policy outlines extensive data collection, categorized as:
1. Information You Provide:
- Profile details (name, date of birth, email, phone number, password)
- Conversations, text, audio, uploaded files, and chat history
- Identity verification documents when contacting support
2. Automatically Collected Data:
- Internet and network activity (IP address, device ID, cookies)
- Device information (model, OS, keystroke patterns, system language)
- Usage data (features accessed, interaction patterns)
- Payment information
3. Information from External Sources:
- Linked accounts (Google, Apple)
- Advertising and marketing data, including past purchases
Why Keystroke Data Matters
A particularly concerning aspect is DeepSeek’s collection of “keystroke patterns or rhythms.” While this data is often used for biometric identification, it remains unclear how DeepSeek utilizes it. TikTok has admitted to a similar practice, stating it helps differentiate users rather than record exact keystrokes.
DeepSeek has not provided clarity on this issue, but given that its servers are located in China, experts worry about the potential implications. Chinese cybersecurity laws require companies to cooperate with government intelligence efforts, leading to fears of surveillance and data misuse.
What Does DeepSeek Do With Your Data?
DeepSeek states that user data is used for:
- Personalized advertising
- Service updates and notifications
- Compliance with legal obligations
- Public interest or security purposes
Additionally, DeepSeek’s corporate group and law enforcement agencies may access the collected data. Reports indicate that DeepSeek shares information with Chinese tech giants Baidu and Volces, raising concerns about data use beyond just AI model improvements.
Should You Be Worried?
Ignoring privacy risks is easy, but DeepSeek’s compliance with China’s cybersecurity laws means the government can demand access to user data at any time. AI models remain opaque, and there’s no way to ensure your information won’t be misused or exploited.
Moreover, cyberattacks pose another risk. Just recently, DeepSeek experienced large-scale malicious attacks, forcing the company to restrict new registrations. As AI becomes more sophisticated, hackers are increasingly targeting user data.
What Can You Do to Protect Yourself?
Experts recommend:
- Reading privacy policies before using any AI platform
- Limiting personal information shared with AI chatbots
- Using VPNs to enhance security and prevent tracking
- Advocating for stronger data privacy laws
Ultimately, data security shouldn’t be an individual’s burden. Governments need comprehensive privacy laws that apply to all tech giants—whether it’s Google, OpenAI, TikTok, or DeepSeek—to ensure user data remains protected.
Would you still trust DeepSeek with your private information?
