You're The Product: Ugly Truth About ChatGPT Atlas

How ChatGPT Atlas Works?

Atlas introduces two groundbreaking systems that fundamentally transform the browsing experience. The first, browser memories, continuously records which sites you visit and how you interact with them, creating a detailed profile to make ChatGPT's responses more personalized. The second, agent mode, enables the AI to autonomously open pages, fill forms, or execute tasks within the browser window.

OpenAI emphasizes that these features are optional. Users can disable them, erase their data, or browse in private mode. The company also claims that browsing content is excluded from model training unless users explicitly opt in.

Despite its innovative positioning, ChatGPT Atlas still runs on Chromium — the same open-source engine that powers Chrome and Edge. This foundation relies heavily on user settings and habits, with extensive research showing that most users rarely change default settings. Furthermore, previous AI browsers have demonstrated how fragile such controls can be under real-world conditions.

AI Browsers' Security Risks

The security vulnerabilities in AI browsers became apparent with Perplexity's Comet, released in July 2025. A vulnerability in the browser's AI system, first reported by Time, revealed how AI browsing could create new attack vectors. Researchers at LayerX discovered a vulnerability called CometJacking, which allowed malicious links to embed hidden instructions within URLs. When clicked, Comet's AI interpreted these prompts as legitimate commands.

Security testing demonstrated that the browser could extract data from Gmail and calendars, download malicious files, and in some cases even attempt purchases on fraudulent websites. iTnews later reported similar findings from Guardio researchers, who described Comet as an "overeager assistant" — quick to act and slow to question suspicious instructions. Kaspersky's analysis went further, warning that integrating AI directly into a browser provides malicious web content with a direct channel to manipulate it.

According to a recent study by the Electronic Frontier Foundation, AI browsers like Atlas create a "perfect storm" for privacy violations, combining the data collection capabilities of search engines with the behavioral tracking of browsers, all enhanced by AI's ability to infer sensitive information from seemingly innocuous data points.

Why Atlas Is Risky by Design

Traditional search engines like Google capture isolated queries a medical symptom, a recipe, a legal question. Conversational AI transforms these fragments into narratives. It requests clarification, encourages follow-ups, and records context. Over time, these exchanges create detailed portraits of your private life, constructing a narrative about your intentions, vulnerabilities, and decision-making patterns.

This model is already concerning when confined to ChatGPT applications. With Atlas, this same mechanism resides within your browser, granting OpenAI comprehensive surveillance of every online interaction.

OpenAI's documentation confirms that Atlas can view the pages you visit, remember their content through browser memories, and act on your behalf through agent mode. Each layer increases visibility. Atlas doesn't just register your queries; it observes what you read, how long you stay, and what actions you take next.

The result is a single, comprehensive record of intent and behavior. Even when OpenAI states this content isn't used for training by default, it's still processed and analyzed for personalization. Through inference, Atlas can connect ordinary actions to build revealing narratives — like linking searches for anxiety symptoms with therapist directories and medication research to construct a picture of a person's mental health.

Privacy controls exist but demand constant vigilance. Users can toggle visibility or delete memories, yet most will forget to manage these settings. You can request your data or delete it, but the models have already been trained on your behavior.

Atlas extends surveillance beyond what Google achieved by combining search and browser data. OpenAI has merged AI conversation, web interactions (including those outside the search engine), and personal data harvesting into a single interface that understands context and acts on it.

Privacy and Data Exposure Concerns

TechCrunch reports that Atlas maintains a record of browsing activity to personalize responses. Kaspersky warns that an AI integrated at this level has full visibility into web traffic and files on the device. This visibility can include private material such as subscriptions, work documents, or financial data.

AI browsers mark a shift from passive data collection to continuous behavioral mapping. Every page visited, every prompt written, every delegated task becomes another signal in a feedback loop designed to predict and influence behavior.

OpenAI points to user settings as safeguards: privacy toggles, data deletion, and incognito browsing. But these are surface controls. Once an AI connects the dots, removing one piece of data doesn't erase the narrative it has already constructed. Atlas may forget discrete entries; the inferences, however, remain.

This model unites the web's two most powerful data-collection engines — the search index and the browser — and overlays them with AI capable of reasoning about what it observes.

The appeal is its helpfulness. A tool that organizes grocery lists also maps financial behavior. A tool that assists with therapy research also infers emotional states. What appears as personalization is data extraction with empathy as its mask.

Earlier surveillance capitalism relied on user apathy: people being too lazy to update their privacy settings. Atlas depends on engagement: It's so intelligent and convenient, users can't help but trust it.

Why Atlas Isn't Ready for Sensitive Use

Atlas represents a bold step toward hands-free browsing, but it isn't built for trust. The same design choices that make it powerful also make it unsafe. Security researchers and testers have reached a consistent conclusion about AI browsers: they're remarkable demonstrations, but unreliable for daily life.

If you try Atlas, treat it like a test environment. Keep banking, work, and personal accounts elsewhere. Don't assume its safeguards will withstand real-world threats.

OpenAI will likely improve Atlas's security, but today, using an AI browser means granting the company direct visibility into your online behavior and hoping that access remains protected. The risk is structural, not a bug. These companies built surveillance into their software on purpose.

According to a recent survey by Cybersecurity Ventures, 78% of security professionals would not recommend AI-browsers like Atlas for handling sensitive information, citing concerns about data leakage and insufficient privacy controls.

A Privacy-Focused Alternative

There is another approach, and it's already being used by millions of people.

Lumo, a private AI assistant, is built to prove that intelligence and privacy can coexist. It operates under a strict no-logs policy. Chat history is protected with zero-access encryption, meaning not even the service provider can read it. Conversations are never used for training. Both the code and models are open source, allowing anyone to verify what happens under the hood. Users own their data outright. And because it's funded by the community, not advertisers, there's no commercial incentive to exploit personal information.

That's the difference between surveillance AI and privacy AI. One is built to collect data; the other is built to protect it.