Granola's Privacy Flaw: Notes Exposed by Default

Granola, the popular AI-powered note-taking app, has a concerning privacy flaw that users need to be aware of. Though the company claims your notes are "private by default," in reality, anyone with a link can view your Granola notes. Additionally, the company uses these notes for internal AI training unless you manually opt out.

Granola markets itself as an "AI notepad for people in back-to-back meetings." It integrates with your calendar to automatically capture audio from your meetings and generate bulleted notes using artificial intelligence. Users can then edit the AI-generated notes, invite collaborators to view them, and leverage Granola's AI assistant to answer questions about the content.

However, the app's default privacy settings leave a lot to be desired. Granola notes are viewable to anyone with a shareable link, regardless of whether you've intentionally shared the note or not. This means if you accidentally send the link to the wrong person, or if the link is intercepted, your private meeting notes could be exposed.

Even more concerning is Granola's use of these notes for internal AI training. Unless you proactively opt out of this feature, the company may be analyzing the content of your private notes to improve their artificial intelligence models. This raises significant privacy and security concerns, as sensitive information discussed in meetings could potentially be used without your knowledge or consent.

To protect your privacy, Granola users should immediately check their privacy settings and ensure the "Share notes by link" option is disabled. Additionally, you may want to review Granola's data usage policies and consider opting out of any AI training that could expose your private notes.

As AI-powered productivity tools become increasingly prevalent, it's crucial that companies prioritize user privacy and security. Granola's privacy issues serve as a stark reminder that users must be diligent in understanding and controlling how their data is being used, even by the apps they trust most.

The Verge's report on this issue highlights the importance of scrutinizing the privacy practices of emerging technologies. As the use of AI-driven tools continues to grow, it's essential that developers and users work together to ensure these powerful tools are designed and deployed with the utmost care for user privacy and security.