Skip to content
SurenoGet Sureno Browser
What apps and AI chats share, and how corrections affect myths

What apps and AI chats share, and how corrections affect myths

Three recent studies examine hidden data flows in apps and AI chats, and what happened to reposting after coverage corrected a vaccine myth.

Tech & Online SafetyNovember 3, 20265 min readHow Sureno writes this

The short version

  • A preprint examining 42 AI chat platforms found that some sent conversation titles, prompts, or email addresses to third-party trackers 1.
  • A study of network traffic from 50 Android puzzle games found that some user-side privacy measures reduced data flows, while consent choices had inconsistent effects 2.
  • A preprint analyzing Japanese posts on X found no diffusion-level backfire after news coverage rejected a vaccine-shedding claim; anti-vaccine repost participation declined more sharply 3.
  • These studies measure particular platforms, games, and online discussions. They do not settle how common these patterns are everywhere.

The studies at a glance

Browser-level measurement study; preprintNot yet peer reviewed

Researchers found that 21 platforms sent conversation titles and nine sent verbatim prompts to third-party trackers; platforms also sent user email addresses.

Who or what was studied
The web interfaces of 42 general-purpose and specialist AI chat platforms.
The catch
Other scientists have not yet checked this preprint, and its findings cover the platforms tested rather than every AI chat service.
arXiv, Oct 27, 2026 ↗

Network-traffic measurement study

Most tested countermeasures reduced data flows, while consent and opt-out choices had inconsistent effects, including some increases in outgoing traffic.

Who or what was studied
More than 16 gigabytes of traffic from 50 free-to-play Android puzzle games, with selected countermeasures tested.
The catch
The measurements concern selected games and countermeasures and do not show that every app behaves the same way or that a flow caused harm.
Secure IT Systems: 31st Nordic Conference, NordSec 2026…, Oct 29, 2026 ↗

Observational repost-network analysis; preprintNot yet peer reviewed

After corrective news coverage, researchers found no diffusion-level backfire and observed a sharper decline in anti-vaccine-cluster repost participation.

Who or what was studied
109,170 Japanese-language posts and 478,089 reposts about vaccine-shedding misinformation on X in 2024.
The catch
Other scientists have not yet checked the preprint, and the observational design cannot show that the coverage caused the change or that users changed their beliefs.
arXiv, Oct 23, 2026 ↗

Three studies measure data sharing and correction

These studies look at two different online safety questions: whether apps and AI chat platforms send information to outside companies, and what happened to the spread of a false health claim after corrective news coverage. Together, they offer snapshots of particular services and discussions, not a complete picture of the internet.

The AI chat and misinformation papers are preprints. That means other scientists have not yet checked them through peer review. The Android games paper is described as published in conference proceedings. A key point for any new research is that one study rarely settles a question: methods, samples, and results need scrutiny and, ideally, repetition.

Some AI chat platforms sent conversation details to trackers

The researchers wanted to find out whether third-party analytics, advertising, or session-recording tools embedded in chatbot websites could receive information about chats. They audited the web interfaces of 42 general-purpose and specialist platforms, including services for health, legal, and education topics. They used browser-level measurement to connect data flows with the user actions that triggered them 1.

They found that 21 of the 42 platforms sent conversation titles to third-party trackers, while nine sent users’ prompts verbatim. The study also observed platforms sending user email addresses to trackers, which could connect chat activity with an identity. In everyday terms, the finding was not that every platform exposed every chat: it was that a substantial share in this sample leaked at least some of these details 1.

This is a measurement study of the platforms and web interfaces examined, not proof that all AI services behave this way or that every user’s information was misused. The paper is a preprint, so its findings have not yet been checked by other scientists. It also does not establish what trackers did with any received data. It matters because people may share sensitive details in a chat while overlooking the other scripts operating on its website.

Game privacy measures had mixed effects on data flows

The researchers asked what information popular free-to-play Android puzzle games collected and where it went, and whether user-side measures changed those flows. They collected and analyzed more than 16 gigabytes of network traffic from 50 games, then tested selected countermeasures 2. This is a technical measurement study of app traffic, rather than a survey of what players believed the games collected.

The study found that most tested countermeasures, such as ad-blocking DNS services, decreased data flows. But withholding consent and opting out of data collection produced inconsistent behavior, including cases where outgoing traffic increased 2. The source does not give an overall percentage reduction, so the size of the effect cannot be summarized as one number.

The findings apply to the selected games and measures tested; they do not show that every game or privacy setting behaves in the same way. Nor do they establish that a particular data flow caused harm to a player. The work may matter to ordinary users because a setting or privacy choice does not necessarily make an app’s network activity simple or predictable.

Corrective coverage was followed by less anti-vaccine reposting

The researchers examined whether corrective information about “vaccine shedding” was followed by more sharing of the misinformation on X. The unsupported claim says that vaccinated people release harmful substances that cause health effects in nearby unvaccinated people. The team analyzed 109,170 Japanese-language posts containing the term and 478,089 reposts from 2024, mapping how posts spread and comparing activity around news coverage rejecting the claim 3.

The researchers found no evidence of a diffusion-level backfire after the coverage. Instead, the topic declined overall, and repost participation in the anti-vaccine cluster fell more sharply than in the pro-vaccine cluster. Their analysis suggests that this shift was associated more with some anti-vaccine supporters stopping reposting and previously less-expressive users joining pro-vaccine sharing than with committed opponents changing their minds 3.

This is an observational analysis of posts and reposts, not a randomized test of corrections. It cannot show that the news coverage alone caused the changes, or that users changed their underlying beliefs. The paper is a preprint, and its results concern one Japanese-language discussion on X in 2024; they do not establish what corrections will do for every health myth or online community.

The findings are useful snapshots, not universal rules

Taken together, the studies show why online safety can be hard to judge from a service’s visible interface alone: researchers observed third-party data flows in selected chat platforms and games, while the misinformation study tracked how participation in one discussion changed around corrective coverage 123.

They do not show that all apps share sensitive information, that every privacy setting fails, or that corrections reliably stop misinformation. The studies differ in subject and method, and two are preprints awaiting scientific review. What remains uncertain includes how widespread these patterns are across other services, whether the measured data was used in harmful ways, and whether the observed change in reposting would recur in other topics or settings 123.

What we don't know yet

  • How common these data flows are across AI chat services and apps beyond the selected platforms and games.
  • What third-party trackers did with the conversation details, prompts, email addresses, or game traffic they received.
  • Whether corrections would produce similar reposting patterns for other health claims, languages, platforms, or communities.
  • Whether the observed changes in reposting reflect changed beliefs or only changed sharing behavior.

Share this explainer

EmailWhatsAppFacebook

A browser that helps you stay safe

Sureno is a Chromium browser with plain-language privacy settings and an assistant that only reads a page when you ask.

Questions people ask

Do AI chatbots share conversations with third parties?

A measurement study of 42 AI chat platforms found that 21 sent conversation titles and nine sent verbatim prompts to third-party trackers. The study also observed email addresses being sent. It does not show that every AI chatbot shares data or what recipients did with it 1.

Do privacy settings stop apps from sending data?

In a study of 50 Android puzzle games, most tested measures, including ad-blocking DNS services, decreased data flows. Consent and opt-out choices had inconsistent effects, including some increases in outgoing traffic. The results are specific to the games and measures studied 2.

Can correcting a health myth make it spread more?

In an analysis of Japanese posts on X about vaccine-shedding misinformation, researchers found no evidence of increased reposting across the network after corrective news coverage. Anti-vaccine-cluster repost participation declined more sharply, but the observational study cannot show that the coverage caused this change 3.

Are these studies peer reviewed?

The AI chat and misinformation papers are preprints, meaning other scientists have not yet checked them through peer review 13. The Android games study is described as published in proceedings of the NordSec 2026 conference 2.

Sources

  1. Penny for Your Prompts: A Measurement Study of Contextual Leakage in AI Chat Platforms — arXiv, 2026-10-27
  2. Investigating Data Flows from Android Games — Secure IT Systems: 31st Nordic Conference, NordSec 2026, Aarhus, November 11-12, 2026, 2026-10-29
  3. Asymmetric Decline Rather Than Backfire: A Repost-Network Analysis of Japanese Vaccine-Shedding Misinformation on X — arXiv, 2026-10-23

Thank you to arXiv for use of its open access interoperability.

Free tools for this

They run in your browser. Nothing is uploaded and there is nothing to sign up for.

More news

Loading more stories…