DeepSeek, a Chinese AI chatbot akin to OpenAI’s ChatGPT, has become the most downloaded free app in the U.S. However, its meteoric rise comes with serious privacy concerns, especially as the U.S. moves to ban TikTok due to its links with the Chinese government.
Like most apps, DeepSeek requires users to accept its privacy policy—but few actually read it. Cybersecurity expert Adrianus Warmenhoven warns that DeepSeek stores user data, including conversations, on servers in China. This raises concerns about data privacy, security risks, and potential government access under China’s strict cybersecurity laws.
What Data Does DeepSeek Collect?
DeepSeek’s privacy policy reveals it gathers data in three categories:
1. Information You Provide
- Profile details: Date of birth, username, email, phone number, password
- Conversations: Text, audio, chat history, prompts, feedback, uploaded files
- User inquiries: Contacting support may require identity verification
2. Automatically Collected Information
- Internet and network data: IP address, device identifier, cookies
- Technical details: Device model, OS, keystroke patterns, system language
- Usage analytics: Features used, interactions, and payment details
3. Information from Other Sources
- Linked accounts: Google, Apple, or other sign-in services
- Data from partners: Advertising and transaction details from third-party stores
Why Does DeepSeek Track Keystrokes?
One of the most controversial aspects of DeepSeek’s data collection is its ability to track “keystroke patterns or rhythms.” While TikTok also collects similar data, other platforms like Instagram do not. DeepSeek has yet to clarify its purpose, but experts suggest this could enable biometric identification.
What makes this risky? Unlike passwords, biometric data cannot be changed if compromised. This opens users to potential identity theft, impersonation, and fraud.
How DeepSeek Uses Your Data
DeepSeek states that it collects user data for:
- Advertising and service notifications
- Compliance with legal obligations
- Public interest and safety concerns
However, the policy also reveals that DeepSeek’s corporate group and law enforcement agencies can access user data. This raises significant concerns, as China’s cybersecurity laws require tech companies to cooperate with national intelligence efforts.
Is DeepSeek Connected to the Chinese Government?
Investigations show that DeepSeek shares data with Baidu and Volces, major Chinese internet infrastructure firms. Additionally, users cannot ask DeepSeek about topics like the 1989 Tiananmen Square massacre, reinforcing concerns about state influence.
Why Should You Be Concerned?
Many users overlook privacy risks, but data security is critical. DeepSeek’s compliance with Chinese regulations means that user data could be accessed by the Chinese government at any time.
Moreover, cyberattacks are a constant threat. If DeepSeek’s servers are breached, personal data—like conversations, payment details, and location history—could fall into the wrong hands. Recently, DeepSeek suffered large-scale malicious attacks, temporarily limiting new registrations.
How Can You Protect Your Data?
Cybersecurity experts recommend:
- Reading privacy policies before using AI chatbots
- Avoiding linking accounts like Google or Apple
- Using VPNs and secure browsers to mask your digital footprint
However, experts argue that privacy protection should not be an individual responsibility. Stronger data privacy laws, similar to those in the European Union, would safeguard users from mass data collection—whether by DeepSeek, TikTok, OpenAI, or Meta.
The Bottom Line
DeepSeek’s privacy policies raise major concerns about data security, government surveillance, and cyber risks. Users should be cautious before sharing personal data with the app—and governments must step up to enforce stricter privacy protections.
