Instinct’s powerful AI assistant is raising privacy and security concerns

Instinct, an AI personal assistant from San Francisco-based Spear Street Technology, is raising privacy and security concerns among testers due to its broad terms of service and access to user data. The terms grant Instinct a perpetual, irrevocable license to use and modify user materials, including for AI training, and allow it to enter binding agreements on users' behalf. Testers reported issues such as the assistant failing to delete Gmail records and continuing to summarize inboxes after access was revoked, prompting questions about the trade-offs of granting AI such extensive autonomy.

Everyone is buzzing about Instinct https://instinct.co/ , an AI personal assistant still in private access, not only for its incredible capabilities, but also for its potential privacy concerns. The agent, a veritable taskmaster, has been praised https://x.com/pitdesi/status/2090579987778937159 as feeling “like magic” and being https://x.com/nikovijay/status/2091537422530044152 one of the “most exciting launches” since OpenClaw. However, some testers have also raised concerns about the AI agent’s security model and its worrisome terms of service https://instinct.co/terms . To be fair, Instinct is still in private testing for now, so these concerns haven’t yet scaled to the wider public at this time. Created by a small team led by former Sierra research scientist Noah Shinn https://www.linkedin.com/in/noah-shinn/ , San Francisco-based Instinct is operated by Spear Street Technology, https://www.bizapedia.com/ca/spear-street-technology-inc.html per its terms https://instinct.co/terms and California https://bizfileonline.sos.ca.gov/ business filings https://www.bizapedia.com/ca/spear-street-technology-inc.html . It’s currently operating in stealth, per PitchBook http://pitchbook.com . The AI agent itself works by connecting to your applications and devices, including your email, messaging apps, calendar, and your device’s audio, location, screen, and more. You can text the agent or call it via text message or WhatsApp, asking it to perform various tasks for you, like booking your appointments and reservations, scheduling a ride to the airport, cleaning up your inbox, organizing important information, handling your shopping, finding https://x.com/FrancisPSantora/status/2091872093642125665 you cheap flights, and much more. Though Instinct is described by testers as outperforming their expectations, some have also raised concerns about the company’s approach to customer privacy and security. This raises a timely question: are the trade-offs of giving AI this level of access and autonomy actually worth it? For instance, several people are https://x.com/jeremybanon/status/2090849902905467321 circulating https://x.com/MikeKhristo/status/2091020331452629043 screenshots https://x.com/samelliottsam/status/2091229462130274500 from the company’s Terms of Service https://instinct.co/terms , which grant https://x.com/thatguybg/status/2091189495710220755 Instinct a broad “perpetual and irrevocable” license to “access, use, host, cache, store, reproduce, transmit, display, publish, distribute, and modify” any of the user’s materials, including for training its AI models. The terms also detail how Instinct can receive information from users’ devices, including screen captures, cursor movements, and keyboard inputs. The terms also allow Instinct to enter into “agreements, commitments, or transactions” on users’ behalf, which would be binding. One early adopter, Peter Yang, pointed out that https://x.com/petergyang/status/2090936583814025417 Instinct would not delete his Gmail records when asked. The team later fixed https://x.com/petergyang/status/2091187611507499321 the problem by adding a tool for deleting external data in its settings, he said. Another person, Claire Vo, found that Instinct was still summarizing their inbox after disconnecting its access https://x.com/clairevo/status/2090929592853037078 . When she asked Instinct what happened, the bot confirmed that the emails were stored in plain text for later searches. Many others questioned the security model, too. One tester was a bit worried https://x.com/anitakirkovska/status/2090907681091403863 when they found that Instinct was able to pull a sign-up code from their email inbox to complete a particular task — in their case, booking a table at a restaurant via Resy. And Hello Patient co-founder Alex Cohen wrote that once he found out how easily Instinct could be phished https://x.com/anothercohen/status/2091251836917350512 , he deleted his account: In addition, Moxxie Ventures founder Katie Jacobs Stanton shared https://x.com/KatieS/status/2091152514603422074 that Instinct broke her trust when it sent an email on her behalf without first checking with her. “We’re trading privacy and control for hyper-personalized AI tools AI notetakers, personalized AI agents, etc , often without fully understanding the trade,” she remarked on X, summarizing the dilemma posed personal AI agents. “The more powerful these agents become, the more trust matters. Every successful action earns a little more trust. One unauthorized action can reset that trust to zero,” she said. Michael Mignano, the founder of Anchor, which was acquired by Spotify, and now a GP at Union Square Ventures, noted that https://x.com/mignano/status/2091146522335301841 products like Instinct are going to “change modern security norms for consumers,” adding that “people will increasingly hand over passwords to 3p third-party apps, unaware of how or what they are storing for them.” Interest in Instinct and personal AI has been growing since the arrival of OpenClaw, a personal AI assistant that became popular for its powerful capabilities, leading its founder to join OpenAI https://techcrunch.com/2026/02/15/openclaw-creator-peter-steinberger-joins-openai/ to help work on the next generation of personal agents. Another messaging-based assistant, Poke, also just exited to Cognition https://techcrunch.com/2026/07/24/why-cognition-bought-poke-ai-personality-is-becoming-a-competitive-advantage/ . Amid the criticism, Instinct’s team hasn’t yet responded to anyone’s concerns or complaints on X, preferring to keep a low profile https://x.com/noahrshinn . The bot itself identifies https://x.com/thogge/status/2090884198961979866/photo/1 Luca Borletti, also formerly of Sierra, as being involved with the company, but that has not been confirmed. TechCrunch has heard from multiple investors that Kleiner Perkins and Conviction have invested in the startup and those rounds have now closed. Requests for comment sent to both the startup’s main email address and Shinn directly have not yet been returned.