Checklist AI Privacy 2026 Guide

10 Things You Should Never Type Into ChatGPT or Any AI Chatbot

This isn't a general "be careful with AI" warning — it's a specific, checkable list. Most people don't paste in sensitive data on purpose; it happens fast, mid-task, without thinking about where the text goes next. Here's exactly what to keep out, and why each one actually matters.

Published September 2026 By the AI Help Guide editorial team 8 minute read
Hands typing on a laptop keyboard at a desk, screen glow soft and out of focus, evening light

Most of these mistakes happen fast — pasting something in without thinking about where it goes next.

Watch: the specific categories of information worth keeping out of any AI chatbot conversation.

10
specific categories of information covered in this list, each with a distinct reason it's risky
Opt-out
is the default setting most consumer-tier chatbots use for training on your conversations
30 days
is a typical retention window for deleted conversations before permanent removal on major platforms
HIPAA
and similar professional confidentiality rules can be violated by pasting client or patient data into a general chatbot

The 10 Things, Specifically

Don't Paste These Into Any General-Purpose AI Chatbot

  • 1. Passwords or security question answers. Even when asking for help troubleshooting a login issue, describe the problem without including the actual credential.
  • 2. Social Security, passport, or other government ID numbers. There's rarely a task that genuinely requires typing the actual number rather than describing the situation.
  • 3. Full financial account or card numbers. Asking for budgeting help doesn't require the actual account number — round figures and categories work just as well.
  • 4. Confidential client, patient, or employer data. This can violate professional obligations like HIPAA or client confidentiality agreements, independent of what the AI company itself does with the data.
  • 5. Unpublished creative or business work you haven't protected. Some chatbots may use input for training unless you've opted out, which matters for anything you plan to patent, copyright, or keep exclusive.
  • 6. Details that could identify someone else without their consent. A friend or family member's medical situation, legal trouble, or personal crisis isn't only your information to share.
  • 7. Anything tied to an active legal matter. Conversations aren't protected by attorney-client privilege, and could theoretically become relevant if a legal dispute ever examines your digital records.
  • 8. Two-factor authentication codes. A code sent to verify your identity should never be typed into a separate tool, regardless of the reason given for needing it.
  • 9. Detailed daily routines combined with your real name and location. Individually mundane, but combined, this is exactly the kind of profile that makes impersonation or targeted scams easier to build.
  • 10. Anything you wouldn't want a human reviewer to potentially see. Safety and quality review processes mean a human occasionally does look at flagged or sampled conversations — a useful baseline test for everything else on this list.

What Actually Happens to This Information

None of this assumes a hidden conspiracy reading your messages in real time. The realistic picture, based on how major AI companies have described their own practices, is more mundane: conversations get stored, may be used to improve future models unless you opt out, and are occasionally reviewed by human staff as part of safety and quality processes rather than continuously monitored. That's a real privacy consideration, not a dramatic one — but it's exactly why "this probably doesn't matter" isn't the same as "this is actually fine."

The professional-confidentiality items on this list (client data, patient information, active legal matters) carry a second layer of risk beyond the AI company itself: pasting that information into a general-purpose chatbot can violate your own professional or legal obligations, regardless of what happens to the data afterward. That's a risk you're taking on personally, separate from the AI platform's own privacy practices.


How to Get the Same Help Without the Risk

Describe the situation instead of pasting the specific data. "I have a checking account with roughly this balance" gets you the same budgeting help as the real account number, without the exposure.
Use placeholder names for other people. Swap real names for "a friend" or "a family member" when the specifics of their situation aren't essential to the question you're actually asking.
Use a business or enterprise account for work-related sensitive tasks. These tiers typically exclude data from training by default and often come with contractual data-handling commitments that free personal accounts don't have.
Turn off "improve the model for everyone" in settings. Every major chatbot has this toggle, and switching it off takes under a minute while meaningfully reducing how your input gets used going forward.
Redact before you paste, not after. If you're copying a real document — an email thread, a contract, a spreadsheet — into a chatbot for help, strip out names, account numbers, and identifying details first rather than trusting yourself to remember to remove them from the AI's response afterward.

Why This List Matters Even More on a Work Account

Several items on this list carry extra weight in a professional context specifically because the confidentiality obligation isn't yours alone to waive. Client data, patient information, and proprietary business details are often covered by contracts, professional licensing rules, or company policy that exists independent of whatever the AI provider does with the input. A well-meaning employee pasting a client's contract into a general chatbot to get a quick summary can create a real compliance problem, even if the AI company itself handles the data responsibly, simply because the client never consented to their information being processed by a third-party tool at all.

This is one of the clearest arguments for using a company-approved AI tool with the right data agreements in place, rather than whichever chatbot happens to be open in another browser tab. If your workplace hasn't set clear guidelines on which AI tools are approved for which categories of data, that's worth raising directly with IT or legal — the ambiguity itself is a risk, independent of whether anything has gone wrong yet.


Frequently Asked Questions

Is it fine to share this kind of information with a paid or enterprise AI account?

Generally lower-risk than a free consumer account, since business and enterprise tiers typically exclude conversations from model training by default and come with stronger contractual data protections. It's still worth checking the specific provider's terms rather than assuming, since protections vary between companies and tiers.

What if I already accidentally shared something sensitive?

Delete the conversation as soon as you notice, and check your account's data controls for any option to request removal from training data specifically. Deletion isn't always instant on the backend — most platforms retain deleted conversations briefly for safety review — but it still meaningfully reduces long-term exposure.

Does this apply to voice assistants and AI features built into other apps too?

Yes, and often people forget this — AI features embedded in email, browsers, and productivity tools follow the same general caution, even though they don't look like a standalone chatbot window. Check the specific privacy settings for each tool rather than assuming your chatbot privacy settings automatically extend everywhere.

Is there a real difference between "training data" risk and "human review" risk?

Yes — training data risk is about your specific phrasing potentially influencing future model behavior in ways that are hard to reverse, while human review risk is about a staff member potentially seeing the literal content for safety or quality purposes. Both are reasons for caution, but they're different mechanisms and different settings often control each one separately.

Does it matter if I'm using a "temporary" or "incognito" chat mode?

It generally reduces retention and training risk compared to a standard conversation, since most platforms exclude temporary chats from long-term history and training by default. It doesn't necessarily eliminate the human-review possibility entirely if content gets flagged for safety reasons, so it's a meaningful risk reducer rather than a full guarantee.

Bottom Line

None of these ten require avoiding AI chatbots altogether — most tasks that touch sensitive categories can be reframed with placeholders or general figures without losing the help you're actually looking for. The habit worth building is a quick pause before pasting: does this specific detail need to be here, or would a description work just as well? That one question closes off nearly all of the actual risk.

More AI Guides, Written Clearly

Browse our full library of AI tool guides, updated regularly as models and features change.

Sources: Stanford HAI — Be Careful What You Tell Your AI Chatbot · Anthropic — Privacy and Data Usage Support Center
OTHER PROJECTS

More from the creator

Explore two other projects from the same creator.

Not sure if something you want to ask is safe to share with an AI chatbot? Chat with our AI and get a quick gut-check first.