What Happened
Users discovered that ChatGPT conversations shared through the app's share feature, with an optional discoverability toggle enabled, were being indexed and surfaced by Google and other search engines. A simple site-scoped search turned up thousands of shared chats, many containing personal and emotionally sensitive disclosures such as resumes, names, and accounts of trauma. Many users had not understood that opting in made their chats publicly searchable.
Impact
Sensitive personal information intended for a single recipient became discoverable to anyone searching the web. Within hours of the reporting, OpenAI removed the discoverability feature, calling it a short-lived experiment, and worked to purge indexed links.
How to Prevent This
- Make sharing controls private by default and avoid opt-in toggles that quietly expose data to search engines
- Add noindex directives to shared content unless the user unmistakably intends public discoverability
- Present clear, explicit warnings describing exactly who can find shared conversations
- Provide simple tools to revoke shares and request de-indexing
- User-test privacy-affecting features to catch unintended-exposure paths before launch