Dropbox’s OpenAI Partnership Makes Users Uneasy

Reading Time: 3 minutes.

The Dropbox logo with a robot icon in the middle. A portion of Dropbox users were surprised to find a new tab in their settings, one for generative AI. The option was turned on by default, and gave users access to AI features in their stored files. These AI options sent data to OpenAI, Dropbox’s new partner in generative AI.

Users, understandably, were wary. The first—and most worrying—assumption was that Dropbox was sending data to OpenAI, by default, without the user’s knowledge. While that doesn’t seem to be the case, Dropbox is using generative AI in partnership with OpenAI. OpenAI has stayed quiet about where they get their data, but a recent exploit in their ChatGPT tool exposed private information of random people, suggesting OpenAI scrapes their data from questionable sources. Could they now have access to all of the files of Dropbox users? Dropbox says that’s not happening, but some users haven’t taken much comfort in that.

How Dropbox Uses Generative AI, by Default

“Your files within Dropbox are sent to a third-party AI only when you chose to interact with AI powered features. For example, when you ask a question about a file.”

Dropbox FAQ page

For a subset of users, Dropbox turned on new AI features by default. This allows users to access generative AI content within their files. The setting only enabled these, it didn’t send out any information without the user taking action.

Dropbox previously used AI for search in a partnership with Nvidia, but this is Dropbox’s first foray into generative AI. They chose to partner with OpenAI, and that may make some users unhappy. Recently, researchers proved that they could extract training data, including private information and even intimate chats, by simply asking OpenAI’s ChatGPT to repeat a word forever.

Screenshot of Dropbox AI option, turned on by default

Screenshot via Benj Edwards, Ars Technica

Dropbox says they won’t allow their partners to train data without consent. Although, since OpenAI doesn’t share their training data, it could be difficult to verify this. Dropbox also enabled these features by default, and users may not realize what they consent to when they use these features. Dropbox claims data shared with partners will be deleted within 30 days. However, that wouldn’t be true if the data was ingested as part of a training model.

How to Delete Your Dropbox Account

You might be worried that Dropbox may not respect your privacy as much as you do. After all, these options are presented in a simple drop-down menu. You could accidentally select something that’s enabled by default and share data with OpenAI. Maybe you just don’t trust anyone who would partner with OpenAI, who can’t be clear about where they get their data from. It’s unlikely Dropbox would expand their use of AI to use your data without your permission, but you may not feel comfortable anyway. If that’s the case, you might want to leave Dropbox.

To take the nuclear option, you can delete your account. Dropbox, fortunately, makes it easy. First, log in on dropbox.com. Click your initials or profile photo, then select Settings from the drop-down menu. At the bottom of the general tab, you’ll find the Delete Account button. Click that. Next, enter your password and a reason for leaving. You may want to voice concerns about OpenAI here.

Be sure to download your files. While they won’t be deleted from your devices when you delete your account, they will be deleted from Dropbox’s servers. If you haven’t synced anything locally, you could lose your files forever. Just to be safe, be sure to download your files before deleting your account.

What Should You Do?

Is it hype? Hysteria? Partially. Dropbox isn’t sending your data to OpenAI unless you choose to use their AI features. However, it’s reasonable to be concerned. Dropbox turned on AI features on accounts without warning, and those features could compromise your privacy if used. That’s not made clear, but Dropbox does explain it on their website.

Personally, I moved my data storage to Proton Drive some time ago. Dropbox is a great and handy service. It was a favorite of mine for a long time. However, Proton Drive encrypts your files on their servers, and uses end-to-end encryption to send files to devices. It’s incredibly secure. They won’t send your data to OpenAI either, which might be a bigger selling point for the service than I realized.

You can find Proton Drive on various app stores and available on Proton’s website.


Sources: