Google Gemini Routes Personal Drive, Gmail to Human Reviewers

A GitHub documentation project titled "Documentation of Gemini File Leaking Behavior" alleges that Google has reversed its 2023 pledge that personal content from Gmail, Docs, and Drive "is not seen by human reviewers," pointing to an October 16 edit that now routes connected Drive and email into human review pipelines.

The author reports the retrieval fires "autonomously in background conversation without explicit @Drive or @Gmail tags," and describes the capture as probabilistic: identical queries can produce different results across sessions.

Four outcomes are listed. A query may return nothing, a metadata summary, a "2–4 sentence exact quotation" carrying "sensitive PII, account details," or "complete, unredacted text" of a document entering the session context. The suggested test prompt is a casual line about possibly paying too much for internet service, with a bill sitting in the connected Gmail account.

On deidentification, the project is blunt. Google's regex and NER scrubbers, the author writes, "cannot sufficiently deidentify narrative data," and the repo flags that users are now warned against connecting apps containing "confidential information that you wouldn't want a reviewer to see."

Separate search results covering the same change note the Gemini Apps Privacy Hub, updated October 13, 2026, confirms that on personal accounts with Keep Activity on, a subset of chats is read by human reviewers including service providers, and reviewed chats stay up to three years after a user deletes them. This is one of several AI safety stories we've tracked this week.

The GitHub author is pseudonymous, and no independent lab has yet published a reproduction of the four-outcome behavior at scale.