hn.today

Google Gemini routes personal Drive files and emails to human annotators

github.com714 points147 comments
Screenshot of Google Gemini routes personal Drive files and emails to human annotators

The repository argues that Google has changed its assurances about privacy in consumer Gemini’s Google Workspace integrations. It says Google’s updated help guidance and an October 16 revision to a 2023 blog post warn that connected Gmail and Drive content may be viewed by human reviewers, and advise users not to connect apps containing confidential material. The repository’s main concern is that Gemini may retrieve personal files or emails during ordinary conversation, even when users do not explicitly ask it to search Gmail or Drive or use an app tag, and that retrieved content may enter a review process.

It describes four possible outcomes from a query mentioning something found in a user’s account: no retrieval, a general summary, a partial verbatim excerpt, or the full text of an email or document. Its author says repeated tests about an internet bill produced all four kinds of responses, sometimes exposing names, addresses, account and confirmation numbers, payment dates, or email headers. Because retrieval is described as probabilistic, one test that reveals little does not establish that no data was accessed; the repository recommends deleting the conversation and trying again. It also argues that automated redaction may fail to remove identifying details embedded in narrative text, leaving sensitive information exposed to reviewers.

Read on github.com147 comments on Hacker News

Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.

More in Security

The daily digest

Today's best Hacker News stories, summarized and screenshotted, one email a day.