cd /news/ai-safety/ai-weekly-warns-firms-on-google-ai-s… · home topics ai-safety article
[ARTICLE · art-135478] src=bitu79.substack.com ↗ pub= topic=ai-safety verified=true sentiment=↓ negative

AI Weekly Warns Firms on Google AI Studio Data Retention Fraud

A security researcher's findings that Google AI Studio's delete function does not actually remove data have been picked up by AI Weekly, which published an alert about the CWE-459 vulnerability and the researcher's automated ban from Google's Vulnerability Reward Program within 60 seconds of filing the report. The researcher documented JSON tracking behavior and 106 retained Drive versions, and AI Weekly's editor's note warned that teams routing regulated prompts through AI Studio should treat "delete" as UI-level until Google clarifies retention publicly.

read1 min views2 publishedSep 21, 2026
AI Weekly Warns Firms on Google AI Studio Data Retention Fraud
Image: source

To all the self-proclaimed ‘experts’ here who spent the weekend defending Google, calling my forensic proof ‘AI-generated slop’, and excusing a fake delete button as ‘standard industry practice’: you might want to read this.

The independent tech press has officially picked up the story. AI Weekly just published an alert regarding the exact CWE-459 vulnerability and the automated VRP ban I documented:

https://aiweekly.co/alerts/google-vrp-banned-researcher-in-60s-over-ai-studio-delete-claim

I highly recommend reading the Editor’s Note:“Any team routing regulated prompts through AI Studio should treat ‘delete’ as UI-level until Google clarifies retention publicly, and governance leads should note that an AI VRP that auto-closes deletion-integrity reports as ‘Intended Behavior’ is itself a signal about how such claims will be triaged going forward.”

I didn’t back down when the VRP bots banned me in 60 seconds, and I didn’t back down when this community tried to flag my reproducible findings off the front page. The press has now verified the JSON tracking behavior, the 106 retained Drive versions, and the VRP audit trails.

You can keep defending a trillion-dollar company’s right to explicitly lie on their UI buttons, but the rest of the industry and governance leads are now waking up to the reality of Google’s backend data hoarding. The truth is out.

── more in #ai-safety 4 stories · sorted by recency
── more on @google 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
Live at https://your-agent.zahid.host
Get free account → Pricing
from €0/mo · no card required
LIVE [news/ai-weekly-warns-firm…] indexed:0 read:1min 2026-09-21 ·