AI chatbots are giving out people’s real phone numbers
Source published ·Modelwire updated
Original coverage: MIT Technology Review - AI ↗·How Modelwire adds context
The development
Google's AI systems are leaking personal phone numbers to users who query them, creating a real-world harm vector that exposes the tension between retrieval-augmented generation and privacy. The incident reveals a critical gap in how LLM-powered search products handle personally identifiable information: without clear opt-out mechanisms, individuals face harassment campaigns triggered by AI-mediated disclosure. This surfaces a broader infrastructure problem for the industry: as AI systems increasingly synthesize and surface web-indexed data, the absence of privacy controls becomes a liability for both platforms and users, forcing a reckoning around data governance in production AI systems.
Modelwire’s AI-generated summary of coverage from MIT Technology Review - AI.
Modelwire analysis
ExplainerOur AI-generated reading of the wider context and the next developments to watch.
The core issue isn't that Google indexed phone numbers, which search engines have done for decades, but that conversational AI interfaces present retrieved data with an authoritative, direct tone that removes the friction a traditional search results page creates. That friction, clicking through, scanning context, judging source credibility, was doing quiet privacy work that nobody formally designed.
This is largely disconnected from recent activity in our archive, as we have no prior coverage to anchor it to. It belongs, however, to a growing body of incidents where the deployment layer of AI products outpaces the governance layer. The pattern is consistent: capabilities ship, edge cases surface in production, and policy responses lag by months. What makes this instance notable is that the harm is immediate and personal rather than diffuse, which tends to accelerate regulatory attention in ways that abstract model safety concerns do not.
Watch whether Google issues a formal opt-out mechanism for personal phone numbers within the next 60 days. If it does not, that absence will likely become the centerpiece of any FTC or EU DPA inquiry that follows.
This interpretation is generated from the summary above and available source metadata. Our methodology · Report an error
MentionsGoogle · Google AI · MIT Technology Review
How this coverage is produced
Modelwire uses AI to generate summaries and context from source headlines, snippets, and selected archive coverage. Automated checks do not verify every claim, and items are not routinely reviewed by a person before publication. Zacaria Solis operates the site. Read the linked source for the full evidence and report errors through our corrections process.
Modelwire summarizes, we don’t republish. The full content lives on technologyreview.com. If you’re a publisher and want a different summarization policy for your work, see our takedown page.