Claude's Conversation Search Tool Still Returns Deleted Chats
Privacy Issue with Deleted Conversations
A Claude Pro user with data training opted out and chat memory enabled reported that Claude's conversation search tool continues to return content from conversations that have been previously deleted. The user specifically tested this by asking Claude to search for a past conversation, and it returned substantive content including the conversation title, message count, and excerpts.
Key Details from the Report
- The chat links for deleted conversations are dead - clicking them returns nothing
- However, the search tool still surfaces the content from these deleted chats
- The user had last engaged with the specific chat on December 3 and is certain they deleted it last year
- This appears to contradict Anthropic's privacy documentation which states that deleted conversations are 'immediately deleted from your conversation history' and 'automatically deleted from our back-end within 30 days'
- The conversation search tool doesn't appear to be hooked into either deletion timeline
User Actions and Implications
The user has emailed [email protected] about the issue and flagged it on Reddit for community awareness. The discovery suggests that if you're relying on deletion as a privacy measure, 'deleted' may not mean 'unsearchable' in Claude's current implementation.
📖 Read the full source: r/ClaudeAI
👀 See Also
OpenClaw's 'Allow Always' Feature Security Flaws and Safer Alternatives
OpenClaw's 'allow always' approval feature has been the subject of two CVEs this month, allowing unauthorized command execution through wrapper command binding and shell line-continuation bypasses. The deeper issue is how the feature trains users to stop paying attention to security prompts.
Clawvisor: Purpose-Based Authorization Layer for OpenClaw Agents
Clawvisor is an authorization layer that sits between AI agents and APIs, enforcing purpose-based authorization where agents declare intentions, users approve specific purposes, and an AI gatekeeper verifies every request against that purpose. Credentials never leave Clawvisor and agents never see them.
ClawGuard: Open-Source Security Gateway for OpenClaw API Credential Protection
ClawGuard is a security gateway that sits between AI agents and external APIs, using dummy credentials on the agent machine while storing real tokens separately. It provides Telegram approval for sensitive calls and maintains an audit trail of requests.
Zero-Trust OpenClaw Architecture Adds Pre-Execution Authorization and Post-Execution Verification
An open-source architecture for OpenClaw adds two security checkpoints: a Rust sidecar that intercepts tool calls before execution with sub-millisecond authorization overhead, and deterministic post-execution verification using assertions instead of LLM judgment. The system includes tracing with DOM snapshots and screenshots, plus a DOM compression skill that reduces token usage by 90-99%.