Stay Hungry, Stay Curious but Be Safe

Many of Steve Jobs’ quotes fit perfectly in the realm of the daily acceleration of new emerging tech that everyone wants to play with. It’s new, it’s sleek and damn is it fun to figure out!  Hey, I’m all for playing but we are operating in a world where it’s the wild, wild west and there’s no sheriff around reinforcing rules of law because – at this point there aren’t any. NO generally agreed upon rules or guidelines around responsible use or AI ethics exist, or at least, none that are followed. We are literally assuming that the companies making this stuff are doing the right things. And, as history has shown us, that is a bad assumption any end-user should make. 

Now, DeepSeek is the new shiny IT tool to play with and I’m all for play but as with any new technology, regardless from which country or company it’s from, you need to be very careful about how you use it, what you share, and play safe.  Here are a few reasons why you should think twice and three times before you download and start using DeepSeek. Yet another reminder, stop blindly clicking ACCEPT terms and conditions without reading them because you literally are giving them all of your data to use it, sell it and disclose it anyway they see fit.  

Yes, the AI model is at least on par with (and some would argue even more advanced than) OpenAI’s ChatGPT or Anthropic’s Claude. But there’s a serious catch. 

I’m giving it to you straight – no chaser. Make no mistake, DeepSeek is sending your data to China. And they tell you that straight up in the English-language DeepSeek privacy policy, which lays out how the company handles user data; it's unequivocal: “We store the information we collect in secure servers located in the People's Republic of China.” See how reading becomes fundamental? 

In other words, all the conversations and questions you send to DeepSeek, along with the answers it generates, are being sent to China. What’s scarier is the information it collects about you. Again, this is listed plainly in DeepSeek’s privacy policy. So, what do they collect? Hang on to your hat because it’s literally everything:  

All information that you share with DeepSeek or “user input.” This is a broad category and will likely cover your chats with DeepSeek via its app or website. “We may collect your text or audio input, prompt, uploaded files, feedback, chat history, or other content that you provide to our model and Services,” the privacy policy states. However, within DeepSeek’s settings, it is “possible” to delete your chat history. Here’s the rub, while you delete your chat history – they still collected the data, sitting in China, on Chinese servers not subject to US laws. 

Think about that…even the personal data you use to setup your account goes to DeepSeek which includes your email address, phone number, date of birth, username, and more. Even if you reach out to them for questions or troubleshooting, all that data will be shared as well.

It doesn’t stop there. As with all digital platforms—from websites to apps—there can also be a large amount of data that is collected automatically and silently when you use the services. DeepSeek says it will collect information about what device you are using, your operating system, IP address, and information such as crash reports. It can also record your “keystroke patterns or rhythms,” a type of data more widely collected in software built for character-based languages. Additionally, if you purchase DeepSeek’s premium services, the platform will collect that information. It also uses cookies and other tracking technology to “measure and analyze how you use our services.”

So far, let’s recap what they are already telling you they’re collecting: 

• Your DeepSeek prompt and chat history 
• Any files you upload - any files 
• Your email address
• Your date of birth
• Your phone number
• Your device info
• Your IP address 
• Any communications you have with DeepSeek
• And the one that is potentially most concerning, keystroke patterns 

So, why is keystroke pattern concerning? What does that mean, keystroke patterns? DeepSeek captures your keystroke patterns so if I’m trying to mimic you, I have to mimic how you type on a computer.  That’s a significant RED FLAG privacy concern. Why do they need that and what is it going to be used for? My Spidey senses are firing! 

Let’s use a relatable and real-world example. DeepSeek captures the things that you type and typed before you even hit SUBMIT. It’s captured. How many times have you started writing your prompt in the prompt window, revised it and even sometimes just deleted the whole thing to start from scratch? In this example, if you start typing in the prompt window a question but deleted and never hit submit, it’s still captured by DeepSeek.  And this is keystroke capture.

There are a lot of inherent problems with how DeepSeek will use your data, but most concerning is even before you hit submit its stored on a server, in China, so subject to Chinese law not US law, collecting way more information you think and probably even more than that. And China has some remarkable legal requirements under its cybersecurity and privacy laws, including laws that demand tech companies cooperate with national intelligence efforts.

The difference between DeepSeek vs Claude or ChatGPT is this - DeepSeek is a black hole for your data and privacy.  Absent of international ethical use laws and frameworks, it’s figuratively and literally the wild west. Companies can, will, and are doing whatever is in their best interests.

Why Should You Be Concerned?

Well, most of us don’t really read the terms of service or privacy policies for a host of reasons. First, they are super long, filled with legalese and mind-numbingly boring. This is done on purpose which makes it exceptionally dangerous. So, what do we do? We scroll to the bottom and click ACCEPT. And by clicking accept you’ve literally lost control of your data and privacy. At the time this isn’t registering as a concern because you really just want to use this new shiny tool. We should’ve learned from the massive leaks and hacks that have been on the rise, but alas, we still click ACCEPT without reading. This fierce need does something that tosses concern and commonsense out the window. Maybe it’s the anticipation and excitement to use this new thing that has users blindly clicking accept but no one can afford to ignore the importance of data security. 

Case in point: DeepSeek is subject to government access under China's cybersecurity laws, which mandate that companies provide access whenever the Chinese government demands it. We don't know how many AI models are trained or how they operate, and that's concerning, too, especially if your data could be misused or maliciously exploited. And for sure you don't want your identity stolen or your bank account information in the wrong hands. Right?

So, by all means play, but play safe. Remember, the more personal information you give to a chatbot or use a credit card to pay for it, and that data is stored by a company which is later hacked or improperly shared — you could be in a world of trouble. The damage done is more than being bothered because now you must change your passwords, but it could lead to you potentially losing your life's savings. Sure, companies like DeepSeek, even Meta or OpenAI, may not actively steal your information to take your identity. But still, no one is immune to cyberattacks which are on the rise — and if they're hosting your data, your data can be taken.

Did you know on January 28, 2025, DeepSeek faced "large-scale malicious attacks,” which forced the company to temporarily limit new registrations? We are living in a digital age that is not simple like Candyland, it’s more likened to a mashup of Game of Thrones meets Dungeons and Dragons and Warcraft.

So, what can YOU do?

First things first, remember, not just with DeepSeek but with any similar platform, when you use their services, you’re doing work for them, under the guise of helping you. REMEMBER, they are not working for you and your use of their platform is rigged to work for them and them alone.

Second, safeguarding your data not just from DeepSeek but as well as all platforms is uber critical. Don’t be sheep and blindly provide your personal or other data wherever you go grazing from one platform to another giving them your personal life details and data. Be proactive when it comes to your digital footprint and cybersecurity. Which means, before clicking ACCEPT, actually read with scrutiny, all terms and conditions of any platform you engage with, so you clearly understand where your data is stored, how it’s being used, and who has access to it.

There’s only so much the end user can do because without strong data privacy laws that apply to ALL companies, the onus to keeping your data safe and protecting your privacy falls squarely on you. All the risk is yours if things go sideways. So, manage your data and privacy like you own it – because you do.

So, before you jump in the DeepSeek waters, ask yourself is my data really safe?