Google Gemini sends personal Drive files to human annotators
Archived — this story has rotated out of today’s deck. It is kept here in full.
The gist
Google edited a 2023 blogpost to confirm connected Drive and email content can reach human review pipelines.
The change undercuts its earlier promise that reviewers never see personal Workspace content.
Background
Google is the company behind Gemini, its conversational AI, and the Gemini Workspace extensions that let it pull context from Gmail, Docs, Drive, spreadsheets and shared folders. When those extensions launched in 2023, Google said personal content from Gmail, Docs and Drive "is not seen by human reviewers." The issue resurfaced after Google updated its guidance and a 2023 blogpost to say connected Drive and email content is routed into human review pipelines, and a GitHub repository documented the behavior.
How it unfolded
- 2023Google launches Gemini Workspace extensions with a promise that personal content from Gmail, Docs and Drive "is not seen by human reviewers."
- May 21, 2026A security guide quotes Google's own Gemini guidance warning users not to enter anything they would not want a human reviewer to see.
- Oct 16, 2026Google edits its 2023 blogpost to confirm that connected Drive and email content is routed into human review pipelines.
- Oct 26, 2026Google's Gemini Apps Privacy Hub states that chats with Notebooks are used to improve Gemini with the help of human reviewers, including trained reviewers from service providers.
- Nov 9, 2026A Hacker News post titled "Google Gemini routes personal Drive files and emails to human annotators" reaches 76 points with 14 comments.
Key terms
- Workspace
- A collection of Google's cloud productivity and collaboration tools, including Gmail, Drive and Docs, offered to schools.
- Gemini Workspace extensions
- Google's generative AI chatbot and virtual assistant, originally launched as Bard and powered by large language models.
- NotebookLM
- An online AI research and note-taking tool by Google Labs that helps users interact with their documents.
Source: Wikipedia
Who’s saying what
- Official
- Google's updated guidance warns users not to connect apps to Gemini Apps if they contain confidential information they would not want a reviewer to see.
- Caution
- The GitHub repository author says testing shows ingestion happens autonomously in background conversation without explicit @Drive or @Gmail tags, and that Google "quietly reversed" its 2023 commitment.
- Public
- Hacker News commenter hek2sch said any tool with human reviewers or annotators, including all of Gemini and NotebookLM, carries a high chance of data being read by random people or leaked for training.
- Public
- Hacker News commenter rustyhancock called the erosion of privacy frustrating and said it explains Gemini responses uncannily tuned to an email.
Still unverified
The GitHub repository author says LLM tool-calling and context injection are probabilistic, so a single test query yields one of four scenarios (zero retrieval, metadata or generic summary, partial unredacted extraction, full-file ingestion), and one test does not disprove the pipeline.