Google Chrome downloads 4GB Gemini AI model without explicit user consent
Security researcher Alexander Hanff reported that Google Chrome automatically downloads a 4GB Gemini Nano AI model onto users' computers without explicit permission when certain AI features are enabled. The silent installation consumes significant storage space and can be re-downloaded if users delete it while keeping AI features active, raising privacy and consent concerns.
What happened
Security researcher Alexander Hanff reported that Google Chrome is automatically downloading a 4GB Gemini Nano AI model onto users' computers without explicit permission. The model is installed in a folder called OptGuideOnDeviceModel when certain Chrome AI features such as 'Help me write' or on-device scam detection are enabled.
Hanff conducted a controlled macOS test with a fresh Chrome profile and found Chrome downloaded the entire 4GB payload without direct user interaction in approximately 14 minutes after evaluating the device's hardware capabilities. The report indicates that deleting the files does not permanently prevent reinstallation if the relevant AI features remain enabled.
Reported impact
Users may experience significant storage space consumption without being aware of the installation, potentially noticing only after observing missing storage space or unusually high data usage. The silent installation raises privacy concerns regarding user control over what software is installed on their systems.
Index analysis
Google stated that Gemini Nano has been offered for Chrome since 2024 as a lightweight on-device model, and that Chrome actively manages disk space to automatically delete the model if free disk space drops below a certain threshold. The download occurs automatically when certain on-device AI features are enabled in Chrome settings.
Governance controls
Users can disable the AI model by manually turning off the 'on-device AI' option through Chrome Settings > System, though the model will be re-downloaded if AI features are subsequently enabled.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.