SECURITY Signal 33
Instinct AI assistant’s broad access and irrevocable data license spark privacy and security worries
↗
Early testers praise Instinct’s capabilities but flag its terms granting a perpetual, irrevocable license to collect, store, and modify user data and its ability to act on users’ behalf, raising privacy and security concerns.
The license lets Instinct retain emails, screen captures, and other personal data even after a user disconnects, exposing organizations to data leakage and compliance risks. Its authority to enter agreements on a user’s behalf could create unintended contractual obligations, and the reported phishing susceptibility highlights a fragile security model that engineers must evaluate before integration.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
Instinct connects to email, messaging, calendar, audio, location, screen and other device resources, offering to perform tasks such as booking, inbox cleanup, and shopping.
The Terms of Service grant a perpetual, irrevocable license to access, store, reproduce, and modify all user materials and allow the assistant to enter agreements on the user’s behalf.
Testers reported that Instinct retained Gmail records after deletion requests, continued summarizing inboxes after disconnect, and could be tricked into phishing attacks.
THE CLUSTER