{"id":259324,"date":"2026-08-24T18:03:55","date_gmt":"2026-08-24T18:03:55","guid":{"rendered":"https:\/\/entertainment.runfyers.com\/index.php\/2026\/08\/24\/instincts-powerful-ai-assistant-is-raising-privacy-and-security-concerns-techcrunch\/"},"modified":"2026-08-24T18:03:55","modified_gmt":"2026-08-24T18:03:55","slug":"instincts-powerful-ai-assistant-is-raising-privacy-and-security-concerns-techcrunch","status":"publish","type":"post","link":"https:\/\/entertainment.runfyers.com\/index.php\/2026\/08\/24\/instincts-powerful-ai-assistant-is-raising-privacy-and-security-concerns-techcrunch\/","title":{"rendered":"Instinct\u2019s powerful AI assistant is raising privacy and security concerns | TechCrunch"},"content":{"rendered":"


\n<\/p>\n

\n

Everyone is buzzing about Instinct<\/a>, an AI personal assistant still in private access, not only for its incredible capabilities, but also for its potential privacy concerns. The agent, a veritable taskmaster, has been praised<\/a> as feeling \u201clike magic\u201d and being<\/a> one of the \u201cmost exciting launches\u201d since OpenClaw. However, some testers have also raised concerns about the AI agent\u2019s security model and its worrisome terms of service<\/a>.<\/p>\n

To be fair, Instinct is still in private testing for now, so these concerns haven\u2019t yet scaled to the wider public at this time.<\/p>\n

Created by a small team led by former Sierra research scientist Noah Shinn<\/a>, San Francisco-based Instinct is operated by Spear Street Technology,<\/a> per its terms<\/a> and California<\/a> business filings<\/a>. It\u2019s currently operating in stealth, per PitchBook<\/a>. <\/p>\n

The AI agent itself works by connecting to your applications and devices, including your email, messaging apps, calendar, and your device\u2019s audio, location, screen, and more. You can text the agent or call it via text message or WhatsApp, asking it to perform various tasks for you, like booking your appointments and reservations, scheduling a ride to the airport, cleaning up your inbox, organizing important information, handling your shopping, finding<\/a> you cheap flights, and much more.<\/p>\n

Though Instinct is described by testers as outperforming their expectations, some have also raised concerns about the company\u2019s approach to customer privacy and security. This raises a timely question: are the trade-offs of giving AI this level of access and autonomy actually worth it?<\/p>\n

For instance, several people are<\/a> circulating<\/a> screenshots<\/a> from the company\u2019s Terms of Service<\/a>, which grant<\/a> Instinct a broad \u201cperpetual and irrevocable\u201d license to \u201caccess, use, host, cache, store, reproduce, transmit, display, publish, distribute, and modify\u201d any of the user\u2019s materials, including for training its AI models. The terms also detail how Instinct can receive information from users\u2019 devices, including screen captures, cursor movements, and keyboard inputs.<\/p>\n

The terms also allow Instinct to enter into \u201cagreements, commitments, or transactions\u201d on users\u2019 behalf, which would be binding.<\/p>\n

\n
\n
\n

let\u2019s pause for a sec and talk about https:\/\/t.co\/19wLOjliYq<\/a><\/p>\n

VCs, notable people, successful people hyping it up all week. They all just giving away their emails and all their personal data, emails, messages:<\/p>\n

\u201csub-licensable, worldwide, perpetual and irrevocable license to\u2026 pic.twitter.com\/MWb3LKnvQp<\/a><\/p>\n

\u2014 Mike Khristo (@MikeKhristo) August 22, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n

\n

One early adopter, Peter Yang, pointed out that<\/a> Instinct would not delete his Gmail records when asked. (The team later fixed<\/a> the problem by adding a tool for deleting external data in its settings, he said.)<\/p>\n

\n
\n
\n

Hey Instinct, it’s not cool to index and retain my emails without my permission and not let me delete them from your records? <\/p>\n

I can’t recommend this to anyone until this is figured out. Thanks @clairevo<\/a> for spotting this. pic.twitter.com\/J2qhYVqwxN<\/a><\/p>\n

\u2014 Peter Yang (@petergyang) August 21, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n

Another person, Claire Vo, found that Instinct was still summarizing their inbox after disconnecting its access<\/a>. When she asked Instinct what happened, the bot confirmed that the emails were stored in plain text for later searches.<\/p>\n

\n
\n
\n

what a thrill! <\/p>\n

i disconnected ai bot instinct from google at 11 AM and got a summary of my emails at 2 PM \ud83d\ude35<\/p>\n

here’s what happened, and what i’ve learned \ud83d\udc47 pic.twitter.com\/LMGGLXcrD5<\/a><\/p>\n

\u2014 claire vo \ud83d\udda4 (@clairevo) August 21, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n

Many others questioned the security model, too. One tester was a bit worried<\/a> when they found that Instinct was able to pull a sign-up code from their email inbox to complete a particular task \u2014 in their case, booking a table at a restaurant via Resy. And Hello Patient co-founder Alex Cohen wrote that once he found out how easily Instinct could be phished<\/a>, he deleted his account:<\/p>\n

\n
\n
\n

For additional context, I don\u2019t think we\u2019re at the point where it\u2019s safe to give AI read\/write access to your inbox.<\/p>\n

I wanted to see how easily Instinct could be phished, so I created a brand new Gmail account and emailed my real personal account with instructions for Instinct\u2026 https:\/\/t.co\/Mh1W3xJQov<\/a> pic.twitter.com\/V5inRtK9Zj<\/a><\/p>\n

\u2014 Alex Cohen (@anothercohen) August 22, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n

In addition, Moxxie Ventures founder Katie Jacobs Stanton shared<\/a> that Instinct broke her trust when it sent an email on her behalf without first checking with her.<\/p>\n

\u201cWe\u2019re trading privacy and control for hyper-personalized AI tools (AI notetakers, personalized AI agents, etc), often without fully understanding the trade,\u201d she remarked on X, summarizing the dilemma posed personal AI agents. \u201cThe more powerful these agents become, the more trust matters. Every successful action earns a little more trust. One unauthorized action can reset that trust to zero,\u201d she said.<\/p>\n

\n
\n
\n

Instinct is an amazing product. I’ve been using it for mostly personal needs and a little bit of work. <\/p>\n

Last night, it was a little naughty and sent an innocuous email on my behalf without checking with me first. I told it that it had broken my trust and disconnected my email.\u2026<\/p>\n

\u2014 Katie Jacobs Stanton (@KatieS) August 22, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n

Michael Mignano, the founder of Anchor, which was acquired by Spotify, and now a GP at Union Square Ventures, noted that <\/a>products like Instinct are going to \u201cchange modern security norms for consumers,\u201d adding that \u201cpeople will increasingly hand over passwords to 3p [third-party] apps, unaware of how or what they are storing for them.\u201d<\/p>\n

Interest in Instinct and personal AI has been growing since the arrival of OpenClaw, a personal AI assistant that became popular for its powerful capabilities, leading its founder to join OpenAI <\/a>to help work on the next generation of personal agents. Another messaging-based assistant, Poke, also just exited to Cognition<\/a>. <\/p>\n

Amid the criticism, Instinct\u2019s team hasn\u2019t yet responded to anyone\u2019s concerns or complaints on X, preferring to keep a low profile<\/a>. (The bot itself identifies<\/a> Luca Borletti, also formerly of Sierra, as being involved with the company, but that has not been confirmed.) TechCrunch has heard from multiple investors that Kleiner Perkins and Conviction have invested in the startup and those rounds have now closed. <\/p>\n

\n
\n
\n

I’ve been using Instinct every day for the last week now. It\u2019s been awesome for travel booking, rebookings, restaurant reservations, email follow-ups, CRM management, even working on our data room for LPs. I’ve tried Hermes, OpenClaw, Tasklet, GrokBot but Instinct takes the cake\u2026<\/p>\n

\u2014 Jesse Middleton (@srcasm) August 22, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n

Requests for comment sent to both the startup\u2019s main email address and Shinn directly have not yet been returned.<\/p>\n<\/div>\n

When you purchase through links in our articles, we may earn a small commission<\/a>. This doesn\u2019t affect our editorial independence.<\/em><\/p>\n