Skip to content
Submit incident
AII-1002-52921
Well documentedThree or more independent publishers report the core facts.Supporting sources are pending verification.

Meta AI in WhatsApp raises privacy concerns over data handling

Meta deployed Meta AI, a chatbot assistant, across WhatsApp, Instagram and Facebook in 2024. Cybersecurity experts and users have raised concerns that the tool collects and processes personal data including financial, medical and identity information, creating risks of exposure to cyberattacks and unauthorized access despite Meta's claims of encryption protection.

23 November 2024 Β· Meta Β· Privacy and surveillance
23 November 2024
AII-1002-52921
Quick facts
Organization
Meta (deployer)
Category
Privacy and surveillance
Country
Mexico
Date
23 November 2024
Drafted by
Raidu Incident Detection

What happened

Meta deployed Meta AI, a virtual assistant chatbot, to WhatsApp, Instagram and Facebook in 2024. The assistant analyzes messages and user interaction patterns to generate contextual responses and perform automated tasks.

Reported impact

Cybersecurity experts and users have raised concerns about Meta AI's collection and storage of personal data from millions of users, including financial information, passwords, medical data, addresses and personal identification numbers. Meta asserts that information is protected by encryption, but experts note that no platform is completely immune to security breaches.

Index analysis

The assistant's operation involves accessing and processing personal information shared in conversations. Data used to train the algorithm may be exposed in cyberattacks. The tool can link with other Meta services such as Facebook and Instagram, increasing the volume of data collected about each user, raising concerns about ethical data handling and potential use for advertising purposes.

Governance controls

Meta states its systems are designed to protect privacy, but questions about data handling practices persist. The chatbot is not designed to meet confidentiality standards required in the medical sector.

Classification

Organization
Meta (deployer)
Category
Privacy and surveillance
Industry
Media, social platforms and marketing
Country
Mexico
Harm status
Potential harm
Intent
Unintentional
Timing
Post-deployment
Harm types
Economic or property
Harmed
Consumers
Consequences
None recorded
AI systems
Meta AI

Sources and evidence

Sources not yet published

This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.

How sources are verifiedSuggest a source for this incident