← All stories

AI security

Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads

Google has updated its privacy policy to clarify that personalized AI features in Search and Gemini can access data from other Google services, such as Gmail and Photos, and that this information may be used to serve targeted ads, according to The Hacker News.

Cover for a ai-security story

Google has updated its privacy policy to spell out that using personalized artificial intelligence features in Search or its Gemini apps could allow the company to serve targeted ads based on a user's activity across other connected Google services, The Hacker News reported.

According to the report, the updated policy language makes the data-sharing arrangement explicit. "You may choose to allow certain Google services, including services like Search or Gemini Apps, to access data from other Google services you use," the policy states. As the headline indicates, data from services such as Gmail and Photos falls within the scope of what could be shared with AI-powered search features and subsequently used for advertising purposes.

The wording of the policy indicates that the access is permission-based, meaning users are given a choice over whether to connect their data across services. However, the disclosure underscores a broader privacy tension as major technology companies fold generative AI assistants into their core products: the same personal data that makes AI features more useful and personalized can also feed the advertising systems that generate most of the company's revenue.

For privacy-conscious users, the update is a reminder to review which cross-service permissions they have enabled and to consider how personal content, including emails and photos, might be used once it is made accessible to AI-driven features. Further details are available in the original report by The Hacker News.

Source: The Hacker News

How to read this

Authorized-only · evidence-based · point-in-time. Aegis cannot guarantee the absence of weaknesses or hidden devices. On this machine, live external HTTP/TLS may be network-blocked and shown as an honest coverage gap. Severity and confidence are kept separate. Finished assessments persist in the encrypted store while durable storage is bound. A theme choice may persist in this browser. Export remains available for a copy you can take with you.