Worried about DeepSeek? Turns out, Gemini and other US AIs collect more user data

Amid growing concerns over Chinese AI models like DeepSeek, new research suggests that fears may be overblown – at least when it comes to data privacy. In fact, some popular US-based AI chatbots might be collecting even more of your personal information.

When DeepSeek debuted its flagship open-source AI model in January, the American tech industry was thrown into hysteria. Some embraced the competition — claiming this is “AI’s Sputnik moment” — but others? Well, not so much. Still, about 12 million users worldwide downloaded the AI chatbot two days after its launch. Numerous privacy and security concerns quickly surfaced about it, prompting private and government organizations to ban DeepSeek’s use in the US and abroad.

Also: 5 ways to use generative AI more safely – and effectively

But here’s the twist – despite all the frenzy, DeepSeek isn’t the biggest data offender out there. Curious to know how your favorite AI chatbot stacks up when it comes to privacy? Let’s look at what Surfshark’s researchers have found.

AI chatbots collect and track user data

Recent data from Surfshark, a well-known VPN provider, uncovered that Google Gemini is the most data-intensive AI chatbot app. DeepSeek, however, comes in fifth out of the 10 most popular applications. 

The researchers analyzed the privacy details of the following chatbots that are the most popular on the Apple App Store: ChatGPT, Gemini, Copilot, Perplexity, DeepSeek, Grok, Jasper, Poe, Claude and Pi. Then, they compared the types of data each application collects, whether it collects any data linked to its users, and whether the app includes third-party advertisers.

Also: Google claims Gemma 3 reaches 98% of DeepSeek’s accuracy using only one GPU

The investigation led the researchers to determine that Google Gemini collects significantly more personal data than its competitors. The app gathers 22 out of 35 user data types, including highly sensitive data like location data, user content, the device’s contacts list, and browsing history. Ultimately, it far outpaces the data collected by the other popular chatbots included in the study.

Only Gemini, Copilot, and Perplexity were found to collect precise location data, but about 30% of the chatbots were found to share sensitive user data, like location data and browsing history, with third parties such as data brokers.

Thirty percent of these chatbots also track user data. In particular, Copilot, Poe, and Jasper collect data to track their users, which means that the user data collected from the app is linked with third-party data for the purpose of targeted advertising or ad measurement metrics.

Furthermore, Copilot and Poe collect device IDs for this purpose, and Jasper gathers not only device IDs but also product interaction data, advertising data, and “any other data about user activity in the app,” according to Surfshark experts.

DeepSeek lies in the middle

The controversial DeepSeek R1 model lies in the middle, so it’s not the best, but not the worst. It collects an average of 11 unique data types and predominantly gathers contact information, user content, and diagnostics. 

Similarly, ChatGPT collects 10 unique types of data, including contact information, user content, identifiers, usage data, and diagnostics. It’s important to note that ChatGPT also amasses chat history, but users can opt to use Temporary chat instead. 

Meanwhile, DeepSeek’s privacy policy states users can manage their chat history and may delete their chat history via their settings.

Also: The best AI chatbots: ChatGPT, Copilot, and notable alternatives

Privacy complaints have plagued DeepSeek’s AI chatbot for various reasons, but they’re primarily grounded in the idea that the American public is at heightened risk of surveillance, cyber warfare, and other national security risks. 

DeepSeek’s privacy policy states: “The personal information we collect from you may be stored on a server located outside the country where you live. We store the information we collect in secure servers located in the People’s Republic of China.”

The AI arms race between the US and China and the rapid acceleration of global AI development fuel profound privacy, security, and ethical risks.