1. Poor access controls let anyone see private chats
- “Entire conversations via exposed permalinks. For Grok: trackers receiving the conversation URL could access the full chat because the link lacked access controls.” — damaru2
- “Multiple providers disclose sensitive conversation‑derived artifacts — including titles, prompts, and screenshots — to third parties… some providers publicly expose conversation permalinks without access controls, allowing trackers to read the entire conversation.” — Coeur
- “My least favorite trend … is they seem to equate a UUID in the url with privacy.” — postalcoder
2. Data sharing with advertisers is often intentional, a business model rather than a leak
- “No, they don't ‘leak data’, data is sold. Leaking data requires a mistake. This is intentional.” — drywater2
- “It's not a ‘leak’. It's in the T&Cs you agreed to. This is the business plan.” — kjs3
- “The word is ‘sell’ not ‘leak’.” — DrMandalay
3. rushed, low‑quality “vibe‑coding” and a move‑fast culture cause these failures
- “what do you want it's the era of vibecoding.” — ex1fm3ta
- “Incompetence and carelessness is rampant in our industry and with vibe coding it has only gotten worse.” — jeltz
- “the amount of vibecoded platforms and documentation is staggering.” — amarcheschi