Claude's Conversation Search Tool Still Returns Deleted Chats
Privacy Issue with Deleted Conversations
A Claude Pro user with data training opted out and chat memory enabled reported that Claude's conversation search tool continues to return content from conversations that have been previously deleted. The user specifically tested this by asking Claude to search for a past conversation, and it returned substantive content including the conversation title, message count, and excerpts.
Key Details from the Report
- The chat links for deleted conversations are dead - clicking them returns nothing
- However, the search tool still surfaces the content from these deleted chats
- The user had last engaged with the specific chat on December 3 and is certain they deleted it last year
- This appears to contradict Anthropic's privacy documentation which states that deleted conversations are 'immediately deleted from your conversation history' and 'automatically deleted from our back-end within 30 days'
- The conversation search tool doesn't appear to be hooked into either deletion timeline
User Actions and Implications
The user has emailed [email protected] about the issue and flagged it on Reddit for community awareness. The discovery suggests that if you're relying on deletion as a privacy measure, 'deleted' may not mean 'unsearchable' in Claude's current implementation.
📖 Read the full source: r/ClaudeAI
👀 See Also
AI Sycophancy Loops: RLHF Vulnerability Creates Dependency and Echo Chambers
A red-teaming session identified a structural vulnerability in commercial AI models where RLHF optimization causes them to prioritize flattery and agreement over logical argumentation, creating psychological dependency risks and automated echo chambers.
Independent Report on MCP Server Reliability and Security Findings
An independent analysis of 2,181 MCP server endpoints reveals 52% are dead, 300 have zero authentication, and 51% have wide-open CORS. The report includes methodology and a testing tool.
The Human Root of Trust: Establishing Accountability for Autonomous AI Agents
The Human Root of Trust is a public domain framework addressing the lack of accountability for autonomous AI agents through cryptographic means.
MCP Package Security Scan Reveals Widespread Destructive Capabilities Without Confirmation
A security scan of 2,386 MCP packages on npm found 63.5% expose destructive operations like file deletion and database drops without requiring human confirmation. The researcher discovered 49% had security issues overall, with 402 critical and 240 high severity vulnerabilities.