Are DeepSeek’s privacy policies a cause for concern? They should be. DeepSeek, a Chinese AI chatbot similar to OpenAI’s ChatGPT, has surged to become the most downloaded free app in the U.S. However, its rapid rise has amplified serious privacy concerns—especially as the U.S. moves to ban TikTok over its Chinese government ties.
Like most apps, DeepSeek requires users to agree to its privacy policy before use. But let’s be honest—most people don’t read it. According to cybersecurity expert Adrianus Warmenhoven from NordVPN, DeepSeek’s privacy policy, available in English, makes one thing clear: user data, including conversations, is stored on servers in China. This poses potential risks due to China’s unique privacy and security laws, which could allow government access to user data.
What DeepSeek Collects from You
DeepSeek gathers a broad range of information, categorized as follows:
1. Information You Provide
- Profile details: name, date of birth, email, phone number, password
- Chat history: text, audio, prompts, feedback, uploaded files
- Customer support interactions: proof of identity, age verification, inquiries
2. Automatically Collected Data
- Device and network activity: IP address, device ID, cookies
- Technical information: operating system, keystroke patterns, system language, performance data
- Usage details: features used, interaction frequency
- Payment information for purchases
3. Data from Other Sources
- Linked accounts: Google, Apple, other login services
- Partner information: advertising measurement, purchase history
What Does “Keystroke Patterns” Mean?
DeepSeek’s policy includes collecting “keystroke patterns or rhythms,” a practice also used by TikTok but not Instagram. This data helps create a biometric identifier—a unique pattern that distinguishes users. While TikTok claims it does not track exact keys pressed, biometric tracking raises serious concerns about security, impersonation, and fraud.
DeepSeek stores this data on secure servers in China, where tech companies must comply with national intelligence laws. Given the ongoing TikTok ban debate, this fuels fears of potential data misuse or censorship—such as DeepSeek restricting discussions about topics like the 1989 Tiananmen Square massacre.
How DeepSeek Uses Your Data
DeepSeek states it collects data for:
- Advertising and notifications
- Service improvements
- Legal compliance and law enforcement cooperation
Notably, DeepSeek’s corporate group has access to this data, meaning information could be shared beyond just improving the chatbot. WIRED found that DeepSeek sends data to Chinese tech firms like Baidu and Volces, with policy language suggesting user inputs might help train new AI models.
Why Should You Care?
Many users overlook privacy risks until it’s too late. DeepSeek operates under Chinese cybersecurity laws, which mandate company cooperation with government requests. This means user data could be accessed at any time.
In addition, security breaches are a growing threat. If your personal information, chat history, or payment details were compromised, it could lead to identity theft, fraud, or even financial loss. Just recently, DeepSeek suffered “large-scale malicious attacks”, forcing the company to pause new registrations.
What Can You Do?
While individual users can take steps to scrutinize privacy policies and limit data sharing, experts argue that stronger global data privacy laws are necessary. As cybersecurity researcher John Scott-Railton points out, all major tech companies—from OpenAI to Meta—set their own data usage terms. Without strict regulations, users remain vulnerable.
F. Mario Trujillo of the Electronic Frontier Foundation emphasizes that chatbot interactions should be protected and not exploited. Governments must implement privacy laws that apply universally—whether for apps based in China or tech giants in the U.S.
Ultimately, safeguarding your privacy shouldn’t be your sole responsibility. Until stronger protections are in place, exercise caution with AI apps like DeepSeek—because once your data is out there, you can’t take it back.
