Do DeepSeek’s privacy policies put your data at risk? Many experts think so. DeepSeek, a Chinese AI chatbot similar to OpenAI’s ChatGPT, has skyrocketed to become the most downloaded free app in the U.S. However, its rapid rise has sparked serious privacy concerns—especially as the U.S. moves to ban TikTok due to its ties to the Chinese government.
Like most apps, DeepSeek requires users to agree to its privacy policy, but few actually read the fine print. According to Adrianus Warmenhoven, a cybersecurity expert at NordVPN, the policy clearly states that user data—including conversations and generated responses—is stored on servers in China. “This raises concerns because of data collection practices ranging from user-shared information to external sources, all falling under China’s privacy and security regulations,” Warmenhoven explained.
What Data Does DeepSeek Collect?
DeepSeek gathers user information in three key ways:
1. Information You Provide
- Profile details: Name, date of birth, email, phone number, password
- Conversations: Chat history, text, audio, prompts, uploaded files
- Contact interactions: ID verification, inquiries, feedback
2. Automatically Collected Information
- Device and internet data: IP address, device identifier, cookies
- Technical details: Device model, OS, system language, diagnostic logs
- Keystroke patterns and rhythms
- Usage behavior: Features accessed, interaction patterns
- Payment data
3. Information from Other Sources
- Linked accounts: Google, Apple, other third-party logins
- Advertising partners: Purchase history, ad interactions
What Does “Keystroke Patterns or Rhythms” Mean?
One of the most concerning aspects of DeepSeek’s policy is its collection of “keystroke patterns or rhythms,” which refers to how users type rather than the specific keys they press. While this data is often used for biometric identification, privacy experts warn that it poses security risks.
TikTok, which collects similar data, claims it does not engage in keylogging (a practice historically used for espionage). However, DeepSeek’s data storage in China adds an additional layer of uncertainty. China’s cybersecurity laws require tech companies to cooperate with national intelligence efforts, meaning user data could be accessed by the government.
How Does DeepSeek Use Your Data?
DeepSeek states that it uses collected data for:
- Advertising: Showing targeted ads
- Service updates: Notifying users of policy changes
- Legal compliance: Adhering to government regulations
- Security and fraud prevention
- AI model development: Improving its chatbot responses
Additionally, DeepSeek’s corporate affiliates can access user data, and the company reserves the right to share information with law enforcement. WIRED reports that DeepSeek transmits data to Baidu and Volces, two major Chinese internet firms. The chatbot also filters content, blocking discussions about topics like the 1989 Tiananmen Square massacre.
Why Should Users Be Concerned?
Ignoring privacy policies is easy, but doing so can be risky. Under China’s cybersecurity laws, DeepSeek must provide data access to the government when requested. This raises concerns about surveillance, data misuse, and potential exploitation.
Additionally, cybersecurity threats are a growing risk. Just recently, DeepSeek was hit by “large-scale malicious attacks,” forcing it to limit new registrations. As AI-driven platforms become more advanced, they also become prime targets for hackers.
Can Users Protect Their Data?
John Scott-Railton, a senior researcher at the University of Toronto’s Citizen Lab, warns that most tech companies dictate how they use your private data. “People should be cautious not just about DeepSeek but about all companies collecting and using their data,” he said.
Experts suggest users should:
- Review privacy settings and limit unnecessary data sharing
- Avoid linking third-party accounts to minimize data exposure
- Use VPNs to enhance online privacy
- Stay informed about evolving AI privacy concerns
However, F. Mario Trujillo, a staff attorney at the Electronic Frontier Foundation, argues that data protection should not be an individual responsibility. “When you share personal information with a chatbot, that data should be safeguarded. The best solution is strong privacy laws that apply universally—whether for Google, OpenAI, TikTok, or DeepSeek.”
Ultimately, protecting your privacy should not be left entirely up to you. With apps from both China and the U.S. facing scrutiny over their data policies, stronger global regulations are necessary to ensure user security.
