Case TS-AABC0E717 Oct 2026MixedCompound claim

General

“After recent Android updates, AI on the device now has access to almost everything on it, including biometrics, financial data, health data, and location, which can be shared with advertising partners." Supporting post text: "WHAT THE AI CAN SEE: On the device: Biometric data, health information, financial apps, what you interact with…”

Plain restatementRecent Android and Samsung software updates have expanded what on-device AI assistants can access, and some categories of that data (biometric templates, financial app data, health data, location, proximity to others) are subsequently transmitted to third-party advertising companies.

Partially accurate but misleadingConfidence Medium
What this verdict means →

This Android privacy post mixes real facts with claims that do not hold up. The real parts: Google expanded Gemini's access to apps like Phone, Messages and WhatsApp in July 2025 even for people who had turned off Gemini activity tracking, and Samsung's "Process data only on device" switch only limits Samsung's own AI while Google's AI keeps sending data to Google. The parts that fail: Google's own documentation states that fingerprint data never leaves the device and is not shared with Google or with any app, so the claim that AI "can see" your biometrics is not accurate. No evidence was found that health, financial or biometric data processed by phone AI is passed to advertising partners. Samsung does run a separate advertising business that collects device identifiers, installed app lists and usage statistics, but that is a different system from Galaxy AI, and the post presents two separate things as one pipeline. The post also contradicts itself, saying "hundreds of companies" in the headline and "expect 10 to 50 names" in the instructions. The six privacy steps it recommends are reasonable and harmless to follow, but the alarming framing around them overstates what is actually documented.

The drift / as claimed vs as evidenced

[drifted from the evidence:] After recent Android [drifted from the evidence:] updates, AI on the device now has access to almost everything on it, including biometrics, financial data, health data, and [drifted from the evidence:] location, which can be shared with advertising partners." Supporting post text: "WHAT [drifted from the evidence:] THE AI CAN [drifted from the evidence:] SEE: On the device: Biometric data, health [drifted from the evidence:] information, financial apps, what you interact with and for how long. Off the device: Your location [drifted from the evidence:] history, and who you are [drifted from the evidence:] physically near. Then it goes out to advertising [drifted from the evidence:] partners. Hundreds of companies [drifted from the evidence:] you have never heard of and have no relationship with.


Recent Android and [added by the neutral restatement:] Samsung software updates have expanded what [added by the neutral restatement:] on-device AI [added by the neutral restatement:] assistants can [added by the neutral restatement:] access, and some categories of that data (biometric [added by the neutral restatement:] templates, financial app data, health [added by the neutral restatement:] data, location, [added by the neutral restatement:] proximity to others) are [added by the neutral restatement:] subsequently transmitted to [added by the neutral restatement:] third-party advertising companies.

Red-tinted words in the claim drifted from the evidence. Green-tinted words are what a neutral restatement needs.

The trace / claim to source

Where it appeared
✕ Fabrication
The claim rests on something that simply does not exist.
Secondary sourcespecialist tech journalism
Android Police, "Samsung's AI privacy switch doesn't stop Google from collecting your data"
Secondary sourcesecurity vendor research blogs quoting Google's own notification email
Malwarebytes Labs / Kaspersky / AdGuard reporting on the July 7, 2025 Gemini app-integration change
Primary sourceofficial vendor
Google Pixel Phone Help, "Understand fingerprint security"
Primary sourceofficial vendor
Samsung account Privacy Notice (Advanced Intelligence section)
Primary sourceofficial vendor
Samsung Ads Privacy Notice
Primary sourceofficial vendor
SmartThings U.S. Privacy Notice
Primary sourceofficial vendor
Samsung Support, "Use features with Galaxy AI"
Primary sourcecompany material about own product
Samsung Newsroom, "Your Privacy, Secured: How Samsung Galaxy AI Empowers You to Take Control of Your Data"
● Primary source found
What is true
  • Android AI reach genuinely expanded. The July 2025 Gemini change is real and was widely reported, and the "whether your Gemini Apps Activity is on or off" phrasing came from Google's own email.
  • The Samsung on-device toggle exists and is at the path the post describes.
  • Cloud processing is the default for many Galaxy AI features, and Samsung's privacy notice does confirm that some advanced intelligence features send account, device, app, and input data off the device.
  • The advertising ID is real and deletable, and Samsung Ads does collect installed-app lists and app usage statistics tied to advertising identifiers.
  • The six remediation steps are, broadly, legitimate privacy hygiene. None of them are harmful advice.
  • Samsung's privacy switch is narrower than users assume, which is a fair and documented criticism.
What is misleading
  • Fabricated capability (biometrics). The claim that AI "can see" biometric data is contradicted by vendor documentation and by hardware architecture. Biometric templates never leave the secure element and are not exposed to apps or to AI. Distortion type: fabrication / unsupported technical assertion.
  • Unsupported data-flow chain. The post asserts a pipeline: AI sees sensitive data, then "it goes out to advertising partners." I found no evidence of this linkage. Samsung's ad business and Samsung's AI features are governed by different notices and different data sets. Presenting two separate systems as one continuous pipe is the central distortion. Distortion type: unsupported causal/structural inference.
  • Category inflation. "Financial apps" and "health information" are stated as flatly accessible. In reality access is permission-gated per app and per data type. Samsung's Personal Data Engine does analyze some personal context on-device, but Samsung documents this as staying on the device. Distortion type: omitted qualifier.
  • Vague agent, "Android updates." The Gemini integration change is a Google change. The "Process data only on device" toggle is a Samsung feature. The SmartThings opt-out list is a Samsung IoT matter. The post merges three different vendors' systems into one undifferentiated "Android update." Distortion type: context collapse.
  • Internal numerical inconsistency. "Hundreds of companies" versus "Expect 10 to 50 names" in the same post. The larger number is used for emotional framing in the headline.
  • "Who you are physically near." Presented as a routine AI data category. Proximity inference via Bluetooth/Wi-Fi scanning is technically possible and is a real adtech concern, but no retrieved source documents it as a Galaxy AI or Gemini data category.
What is uncertain
  • The exact contents of the SmartThings advertising partner opt-out list. I could not retrieve the live, region-specific partner list, so I cannot confirm or refute the "10 to 50 names" figure. Search budget was exhausted before this could be resolved.
  • Whether Google uses Gemini interaction data for ad personalization. Google has historically stated it does not use Gemini conversations for ads, and there has been reporting on advertising entering AI products. I could not complete a search on the current status, so I am not making a finding either way.
  • The original post itself. I could not access the Instagram post directly and worked from the supplied intake transcription.
  • Samsung's unverified self-claims. Samsung's assertion that data is "never stored long-term or used for AI training" is company material about its own product and has not been independently audited in anything I retrieved.
Evidence summary

On expanded AI access (this part has a real basis). Google did materially expand Gemini's reach into Android apps in mid-2025. Google's notification email stated that Gemini would be able to help users use Phone, Messages, WhatsApp, and Utilities on their phone, whether Gemini Apps Activity is on or off, and the update applied regardless of whether that setting was enabled, pushed to all Android versions supporting Gemini starting with Android 10. Previously, disabling Gemini Apps Activity cut users off from these deeper integrations, meaning Gemini could not place calls or send texts. Malwarebytes noted that Google's own messaging was internally inconsistent, saying in one place the change would roll out automatically regardless of prior settings. On the Samsung toggle (the post's step 1 is real). Samsung support documentation confirms a "master switch" to disable all cloud-based processing for Galaxy AI features, found at Settings, then Galaxy AI, then "Process data only on device." However, Android Police found that this switch only covers Samsung's Galaxy AI and does nothing to Google's AI, so Gemini, Circle to Search, and Magic Compose keep sending data to Google. On what Samsung AI actually collects. Samsung's own privacy notice states that with advanced intelligence, certain apps or services use your inputs to provide intelligence features, and some apps process your data solely within your device while others require collection of data such as your account information, device and app information, and your inputs including text or media files. Samsung states that prior to initial use of an advanced intelligence feature requiring data collection, the user is informed which data that app or service processes and for what purpose. Samsung's own marketing material claims that personal data is never stored long-term or used for AI training, whether processed on-device or in the cloud. On biometrics (this is where the claim fails hardest). Google's official documentation states that fingerprint data is stored securely and never leaves the device, is not shared with Google or any apps on the device, and apps are notified only whether the fingerprint was verified. The fingerprint template is stored in the Trusted Execution Environment, isolated from the main operating system. Biometric data is stored as an encrypted, non-reversible mathematical template rather than a raw image, and never leaves the device or secure hardware. Samsung uses an equivalent approach: Knox Vault is described as a physically isolated space within the hardware, separate from the main processor. On advertising. Samsung does operate an advertising business, but it is a separate system from Galaxy AI. The Samsung Ads Privacy Notice describes collecting device identifiers and settings such as manufacturer, model, OS version, IP address, Advertising IDs, connection status, carrier, plus device usage and log information including list of installed apps, app version, and app usage statistics. That list is real and meaningful, but it does not include biometric templates, health records, or financial app contents. I found no source, in any of the Samsung or Google privacy notices retrieved, stating that Galaxy AI or Gemini processing output is passed to advertising partners.

Complete reasoning
Two verifiable facts sit underneath this post: Google really did widen Gemini's access to Android apps in July 2025 regardless of the Gemini Apps Activity setting, and Samsung's much-publicized on-device privacy toggle really does cover only Samsung's own AI while leaving Google's data collection untouched. But the post builds a false pipeline on top of those facts. The specific assertion that AI accesses biometric data is contradicted by Google's own documentation and by the hardware design of Android's Trusted Execution Environment, and no retrieved source supports the claim that AI-accessible health, financial, or biometric data is passed to advertising partners. Confidence is Medium rather than High because I could not retrieve the live SmartThings partner opt-out list or resolve the current status of ad personalization in Gemini, both of which bear on the advertising half of the claim.
Use this case

The reply is formatted for pasting into the thread where the claim is circulating.

Compact share page: verify.trueseeker.com/s/aabc0e712483/DQuz9LskPm_384IsFRnVVv7

Similar cases on record