The meteoric rise of DeepSeek, China’s viral AI chatbot, has escalated from a market disruption to a potential national security concern. The White House press secretary Karoline Leavitt has confirmed that the National Security Council is “looking into what [the national security implications] may be,” while the US Navy has reportedly banned its members from using DeepSeek’s apps due to “potential security and ethical concerns associated with the model’s origin and usage.”
These developments follow earlier warnings from Australia’s science minister Ed Husic about “unanswered questions” regarding the platform’s “data and privacy management.” The situation has become more complex as DeepSeek reports facing “large-scale malicious attacks,” according to Chinese state media.
Understanding DeepSeek’s Data Collection
DeepSeek’s privacy policy is notably transparent about its extensive data collection practices. The app collects information in three key ways:
User-Provided Information:
- Account details (email, phone number, personal information)
- All text and audio inputs
- Uploaded files and chat histories
- User feedback and interactions
Automatically Collected Information:
- Device models and operating systems
- Keystroke patterns and rhythms
- IP addresses and system language
- Cross-device activity tracking
- Unique device identifiers
Information from Other Sources:
- Data collected from third parties and partners
- Information used to track activity across multiple devices
Data Collection and Privacy Implications
DeepSeek’s privacy policy is notably transparent about its extensive data collection. As Forbes reports, the company directly states: “We collect your information in three ways: Information You Provide, Automatically Collected Information, and Information From Other Sources.”
This includes:
- User-Provided Information: “Your text or audio input, prompt, uploaded files, feedback, chat history, or other content that you provide to our model and Services.”
- Automatically Collected Information: “Internet or other network activity information such as your IP address, unique device identifiers, and cookies… device model, operating system, keystroke patterns or rhythms, IP address, and system language.”
- Data Storage: As explicitly stated in their policy: “We store the information we collect in secure servers located in the People’s Republic of China.”
Technical Innovation vs. Security Concerns
DeepSeek has achieved remarkable technical innovation, reportedly requiring only about 2,000 NVIDIA chips compared to the 16,000 typically needed by competitors. While this demonstrates impressive efficiency, it also raises questions about the tradeoffs between innovation and security.
What Do The Experts Say?
Security experts and government officials have raised various concerns:
- US Navy has banned its usage
- National Security Council is “looking into what [the national security implications] may be,”
- Australian Science Minister Ed Husic has publicly addressed privacy concerns
- Harmonic Security warns about enterprise risks from AI platform data exposure
- Privacy advocates highlight concerns about data matching capabilities outside the service
- Security researchers note the broader implications for AI security practices
Practical Guidelines for Users
If choosing to use DeepSeek, experts recommend several essential precautions:
Data Protection:
- Never upload sensitive personal or business information
- Avoid sharing any confidential or proprietary data
- Be cautious with personal identifiers and location information
Device Security:
- Regularly review and restrict app permissions
- Deny access to microphone and camera
- Limit photo library access
- Monitor cross-device tracking settings
Account Management:
- Use minimal personal information when creating accounts
- Regularly review and delete chat histories
- Be mindful of what information you share in prompts
The Bigger Picture
The DeepSeek situation highlights broader challenges in the AI landscape. While the app’s capabilities are impressive, they have significant privacy implications extending beyond any single platform or country of origin. Balancing technological advancement with data security and user privacy is the fundamental challenge.
Technology and Competition Concerns
The situation has raised new questions about AI development methods. David Sacks, the White House AI and crypto czar, suggests that DeepSeek may have used knowledge distillation from US models: “There’s substantial evidence that what DeepSeek did here is they distilled the knowledge out of OpenAI’s models.”
OpenAI has responded to these concerns, stating that Chinese companies are “constantly trying to distill the models of leading US AI companies” and emphasizing their commitment to working “closely with the U.S. government to protect the most capable models best.”
Looking Forward – DeepSake’s Privacy and Security Concerns
While President Trump has described DeepSeek as “a wake-up call” for the US tech industry, he also suggested it could be “a good thing” if AI development becomes more cost-effective. However, the emergence of DeepSeek has challenged assumptions about US technological dominance, particularly given trade restrictions on high-end chips to China.
As the situation continues to evolve, users must carefully weigh the benefits of these powerful tools against growing privacy and security concerns. The UK’s Information Commissioner’s Office provides a framework for evaluating AI platforms, emphasizing the need for “meaningful, concise and accessible information about the use of personal data.”
Understanding both the capabilities and limitations of AI platforms like DeepSeek, along with their broader implications for national security and technological competition, becomes increasingly crucial for making informed decisions about their use.