Reddit Users Discover Claude Chats in Search Results, Raising Privacy Concerns
A recent discovery on Reddit has left users of Anthropic’s chatbot wondering about the privacy of their online conversations. Some users found that typing ‘site:claude.ai/share’ into Google or Bing pulled up chat logs containing personal discussions. This revelation raises questions about what it means for chats and files to be shareable online, and how much control people have over what they choose to share.
The issue started when Reddit users discovered that Claude’s publicly shared links could be indexed by search engines. As a result, their conversations became discoverable in public search results. Users who intended to share content with a small group of people may inadvertently make their entire conversation visible to the internet.
Claude chats have shown up in Google results before. In September, Anthropic told Forbes that chats become visible via Google and Bing search because they’re shared online or on social media. The company stated it uses a ‘robots.txt’ file to prevent this issue, but many of the chats that appeared in Google search didn’t have the necessary ‘noindex’ HTML tag.
Anthropic declined to comment on the matter, but previously told other publications it doesn’t share chat directories or sitemaps with search engines. The company’s handling of user data and online sharing has come under scrutiny following this discovery. Users may want to check their sharing settings on other platforms as well, considering how easily conversations can be made public.
The Guardian US used a similar search query to look up Google documents that users have created public links for. They found a long list of files, including many with sensitive information. Typing in a site-specific search query for Google Drive files containing the word ‘test’ turned up several pages of Google documents ranging from exams at specific elementary and high schools to test results in certain locations.
Searching for documents containing the word ‘confidential’ surfaced files with potentially sensitive or private information, including a city health department confidentiality agreement. Some files date back as far as 2003. It’s unclear how long these documents have been available online, but they were discoverable because links had been posted somewhere on the internet or social media.
Neither Google nor Anthropic warn users that their files could be indexed by search engines when creating shareable links. Jacob Hoffman-Andrews, a senior staff technologist at digital privacy advocacy group the Electronic Frontier Foundation, believes companies need to be clearer with their users about the implications of sharing content online.
‘The privacy afforded by ‘anyone with a link’-style sharing is fragile,’ Hoffman-Andrews said. If you share something with a friend, and they share it with another person who posts it on social media, suddenly it’s findable and readable by anyone on the web.’ Users should use extreme caution when creating shareable links or take an alternative approach like copying and pasting text instead.
Fortunately, users can unpublish chats or Google files they’ve previously shared. On Claude’s desktop browser, click your profile icon in the bottom-left corner and choose ‘settings’ from the menu. Go to the ‘privacy’ tab and scroll down to the ‘your data’ section, where you can manage public chats.
Users who want to prevent their conversations from becoming public should change their sharing settings on other platforms as well. On Google Drive, users will need to open each individual document they’ve made public. Click the ‘share’ button in the top right of your desktop browser window and adjust your access settings so that files are only available to specific people or groups.
The Reddit discovery is a reminder for users to be mindful of their online conversations and the sharing options on various platforms. It’s essential to understand how easily shared content can become public, especially when it contains sensitive information.