Chrome Deletes Its Own Privacy Promise for Sneaky On-Device AI

Google Chrome’s settings web page made a quiet promise earlier than its most up-to-date replace.

In Chrome model 147, beneath Settings > System > On-device AI, the outline learn: “To energy options like rip-off detection, Chrome can use AI fashions that run instantly in your machine with out sending your information to Google servers.”

That line is gone in Chrome 148.0.7778.97, which began rolling out not too long ago. The brand new textual content simply says Chrome “can use AI fashions that run instantly in your machine. When that is off, these options may not work.”

The elimination was noticed by customers on the Chrome subreddit and surfaced on Hacker News, the place it collected over 250 factors in hours, sparking debate amongst privateness fans. “I am simply stunned individuals use Chrome in any respect. Google has confirmed again and again they cannot be trusted and can exploit you each probability they get,” stated one consumer. “It is on-device AI spyware and adware, actually,” one other consumer argued. “It collects intelligence in regards to the consumer, summarizes it and sends it to Google, all paid by the consumer’s electrical energy invoice. Deviously intelligent.”

As we reported yesterday, Chrome has been silently downloading a roughly 4GB file referred to as weights.bin—the burden file for Gemini Nano—to any machine that meets its minimal {hardware} necessities, with no opt-in immediate and no seen notification. The file lands in a folder referred to as OptGuideOnDeviceModel inside Chrome’s consumer information listing. Delete it, and Chrome downloads it once more on the following restart.

Privateness researcher Alexander Hanff confirmed the conduct utilizing macOS kernel filesystem logs, and it has since been verified on Home windows 11 and Ubuntu as nicely.

The deleted phrase in Chrome was doing actual work. It was the first in-product justification for why Chrome installs Gemini Nano with out asking. Google’s argument was that on-device processing retains your information off its servers, making the silent set up of its Gemini Nano mannequin a internet privateness profit.

That argument already had a gap in it. Chrome 147’s “AI Mode” capsule within the deal with bar routes each question to Google’s cloud, not the native Gemini Nano mannequin.

Eradicating the “with out sending your information to Google servers” language does not repair that contradiction. It simply stops Chrome from making a declare it apparently is not ready to face behind.

Google didn’t reply to Decrypt’s request for touch upon the settings change.

Hanff, whose forensic documentation of the silent set up sparked the unique story, has argued the obtain violates Article 5(3) of the EU ePrivacy Directive, which requires specific consent earlier than storing information on a consumer’s machine. Eradicating the privateness language from the UI does not change that authorized publicity—it removes considered one of Google’s clearest arguments for why the silent set up was justified within the first place.

Chrome 148 is at the moment rolling out. Customers nonetheless on model 147 will see the outdated textual content; anybody who has already up to date will discover the privateness declare gone.