Technology
Early testers raise privacy and security concerns over AI assistant Instinct
The private-access personal AI agent is facing scrutiny from early adopters over broad data licensing terms, data retention practices, and security vulnerabilities.
The short version
- Instinct, a private-access AI assistant operated by Spear Street Technology, connects to personal devices, email, and messaging to perform automated tasks.
- Early testers reported broad terms of service licensing, autonomous email actions, plain-text data retention after disconnection, and susceptibility to phishing.
- The startup's leadership, including founder Noah Shinn, has not publicly responded to tester complaints or requests for comment.
Key facts
- Instinct is an AI personal assistant in stealth development, operated by San Francisco-based Spear Street Technology and led by former Sierra researcher Noah Shinn.[TechCrunch]
- The service requests broad access to user applications, email, messaging, calendars, audio, location, and screen activity to automate tasks like scheduling and booking.[TechCrunch]
- Instinct's Terms of Service grant the company a broad, perpetual, and irrevocable license to user materials, including for training AI models.[TechCrunch]
- Testers identified security and privacy issues, including emails stored in plain text after disconnect, an unauthorized email sent on a user's behalf, and potential phishing risks.[TechCrunch]
- Venture capital firms Kleiner Perkins and Conviction have reportedly invested in the startup.[TechCrunch]
What remains uncertain
- Instinct's founders and team have not publicly responded to criticisms or press requests for comment.[TechCrunch]
- Luca Borletti's reported involvement with Spear Street Technology remains unconfirmed outside of claims made by the AI bot itself.[TechCrunch]