1.2%
ChatGPT showed users other people's chats
A bug let some users see strangers' chat titles. For 1.2% of Plus subscribers it also exposed names, emails, addresses and the last four digits of their cards.
Source: OpenAI
Trust
Private by design, not by promise
Every company on this page asked for your trust. Most of them meant well, and it didn't help: once your life sits on someone else's servers, it can be leaked, sold, subpoenaed or read by a stranger.
WeMemi never asks. Unless you turn on cloud backup, your life never reaches us — and if you do, it arrives encrypted with a key only you hold. Your memory lives on your devices, and when they sync, they talk to each other directly. There's nothing readable for us to leak, sell or hand over.
The record
What happens to a promise
Privacy policies, security teams and good intentions. Here's how they held up. Every story links to its source.
smart_toy
AI companies
Your conversations were never private
20M
A court ordered ChatGPT logs kept, deleted chats included
In the New York Times lawsuit, OpenAI was ordered to preserve chats users had deleted, and later to hand 20 million de-identified logs to the plaintiffs.
Source: OpenAI · Bloomberg Law
370,000
Private AI chats turned up in Google search
Shared ChatGPT chats were indexed by Google, and Forbes found about 370,000 Grok conversations searchable online. People were never warned that sharing made them public.
Source: Forbes
Public
Meta AI posted private prompts to a public feed
Medical questions, legal troubles and home addresses showed up in the app's Discover feed, shared by people who didn't realize it was public.
Source: Malwarebytes
1M+
DeepSeek left user chats open on the internet
A database with no password held more than a million log lines, including chat history in plain text and secret keys.
Source: Wiz Research
300M
An AI chat app leaked 300 million messages
A misconfigured backend exposed the full chat histories of 25 million people, including conversations about suicide.
Source: 404 Media
No privilege
Your AI chats can be used against you in court
OpenAI's CEO said ChatGPT chats have no legal confidentiality. A federal judge then ruled a defendant's Claude chats were not protected by attorney-client privilege.
Source: TechCrunch · Harvard Law Review
$25M
Alexa kept children's voice recordings indefinitely
Amazon paid $25 million to settle with the FTC. In 2025 it removed the option to process voice on the device, so every request now goes to its cloud.
Source: FTC · TechCrunch
thumb_down
Facebook and Meta
The platform that knows the most
$5B
Cambridge Analytica, then a record FTC penalty
Facebook told people they could keep their data among friends, then let app developers take it. Up to 87 million people were affected.
Source: FTC
533M
Half a billion phone numbers scraped and leaked
Names, phone numbers and birth dates of 533 million users were collected through Facebook's own contact tools and published. Ireland fined Meta €265 million.
Source: Irish DPC
Plain text
Hundreds of millions of passwords stored unencrypted
Facebook and Instagram passwords sat readable on internal systems. Meta was fined €91 million.
Source: Irish DPC
$1.4B
A decade of face scanning without consent
Facebook ran facial recognition on nearly every face in uploaded photos. Texas won the largest privacy settlement ever secured by a single state.
Source: Texas Attorney General
Liable
Period-tracker data collected for advertising
A federal jury found Meta illegally captured women's menstrual and pregnancy data from the Flo app.
Source: CNBC
Incognito
Browsing tracked even in private mode
Researchers found Facebook and Instagram secretly linked Android users' web browsing to their accounts, even in incognito mode or behind a VPN.
Source: Researchers' disclosure
Selfies
Contractors read people's chats with Meta AI
Contract workers rating Meta's chatbot said they saw real names, phone numbers, selfies and intimate conversations, and that it happened more on Meta's projects than on other companies'.
Source: Fortune
20,225
Meta's AI support bot handed over Instagram accounts
An AI recovery tool sent password resets to whatever email address the person asking gave it. Attackers hijacked 20,225 accounts, including their private messages, over seven weeks.
Source: Help Net Security
forum
Social media
Your data is the product
$150M
Security phone numbers used to sell ads
More than 140 million people gave Twitter their number to protect their accounts. Twitter let advertisers target them with it.
Source: FTC
€530M
TikTok sent Europeans' data to China
Regulators found the transfers broke EU law, after TikTok admitted some data was stored on servers in China.
Source: Irish DPC
$400M
TikTok settles over collecting children's data
The US Justice Department settled its case that TikTok gathered children's data without telling their parents.
Source: US Department of Justice
€310M
LinkedIn profiled members for ads without a legal basis
Regulators found LinkedIn had no lawful grounds to analyze its members' behavior for ad targeting.
Source: Irish DPC
lock_open
Companies that lost it
Kept in the cloud, lost from the cloud
6.9M
Genetic data hacked, then sold in bankruptcy
Hackers took 23andMe customers' ancestry and relative data. When the company went bankrupt, its genetic database was sold for $305 million.
Source: Texas Attorney General
13,000
A women's safety app leaked ID selfies
The Tea app exposed about 13,000 verification selfies and ID photos, then more than a million private messages days later.
Source: NPR
81 women
A Ring employee watched customers' private videos
Any employee could view any customer's camera. One watched thousands of recordings of women in their homes.
Source: FTC
192.7M
The largest health-data breach on record
A ransomware attack on Change Healthcare exposed medical and insurance records of 192.7 million Americans.
109M
Who nearly every AT&T customer called and texted
Records of who customers called and texted, and when, were stolen from a cloud account. What people said was not taken, but who they talked to was.
Source: Krebs on Security
$150M
Stolen password vaults, still being cracked
LastPass vaults stolen in 2022 have been tied to about $150 million in crypto thefts, years after the breach.
Source: Krebs on Security
150M+
An ID-checking company lost 150 million licenses
The company that verifies IDs for businesses confirmed driver's license and passport details for more than 150 million people were stolen.
Source: TechCrunch
Fingerprints
Hospital patients lost data they can never change
New York City hospitals lost medical records, fingerprints and palm prints for at least 1.8 million people.
Source: TechCrunch
So there's nothing to trust
Most apps ask you to trust their privacy policy. WeMemi is built so there's nothing to trust: unless you turn on cloud backup, your life never reaches us — and if you do, it arrives encrypted with a key only you hold.
computer
It lives on your computer and your phone
Your archive stays on your own machine, and the AI that reads it runs there too. Turn on encryption and your archive is locked with a key only you hold. We couldn't look at your data if we wanted to.
group
Shared person to person
When you share a moment, it travels encrypted straight to the people you chose, device to device. If a direct path isn't possible, it passes through a relay that can't read it. What you share lives with your people, never with us.
check_circle
Nothing happens without your yes
Every source is something you turn on, and one switch pauses it all. Nothing important is kept or shared until you say so.
inventory_2
Nothing disappears by accident
Things you tidy away go to an archive, and one click brings them back. Deleting something for good is always your choice, never ours.
Beyond trust
On the free plan, we don't even know who you are. And when you pay, nothing you keep or share is ever readable by us, whether it's on our servers or on its way there.
Keep your life where you live
Free on one device, for Mac and Windows. No account needed.