Claude's Conversation Search Tool Still Returns Deleted Chats
Privacy Issue with Deleted Conversations
A Claude Pro user with data training opted out and chat memory enabled reported that Claude's conversation search tool continues to return content from conversations that have been previously deleted. The user specifically tested this by asking Claude to search for a past conversation, and it returned substantive content including the conversation title, message count, and excerpts.
Key Details from the Report
- The chat links for deleted conversations are dead - clicking them returns nothing
- However, the search tool still surfaces the content from these deleted chats
- The user had last engaged with the specific chat on December 3 and is certain they deleted it last year
- This appears to contradict Anthropic's privacy documentation which states that deleted conversations are 'immediately deleted from your conversation history' and 'automatically deleted from our back-end within 30 days'
- The conversation search tool doesn't appear to be hooked into either deletion timeline
User Actions and Implications
The user has emailed [email protected] about the issue and flagged it on Reddit for community awareness. The discovery suggests that if you're relying on deletion as a privacy measure, 'deleted' may not mean 'unsearchable' in Claude's current implementation.
📖 Read the full source: r/ClaudeAI
👀 See Also
MCPwner AI Pentesting Tool Finds Multiple 0-Day Vulnerabilities in OpenClaw
MCPwner, an MCP server that orchestrates AI agents for automated penetration testing, identified several critical 0-day vulnerabilities in OpenClaw including environment variable injection, permission bypass, and information disclosure flaws that standard scanners missed.
U of T Researchers Demonstrate AI Worm Powerable by Free Open-Weight Models
Researchers at the University of Toronto demonstrated the first AI-powered worm that adapts its spreading strategy using publicly accessible open-weight models, targeting any online device.
Static Analysis of 48 AI-Generated Apps: 90% Had Security Vulnerabilities
A developer scanned 48 public GitHub repos built with Lovable, Bolt, and Replit. 90% had at least one vulnerability. Common issues: auth gaps (44%), SECURITY DEFINER Postgres functions (33%), BOLA/IDOR (25%), and committed secrets (25%).
Claude Code source map leak reveals minified JavaScript was already public on npm
A source map file accidentally included in version 2.1.88 of the @anthropic-ai/claude-code npm package revealed internal developer comments, but the actual 13MB cli.js file containing 148,000+ plaintext strings has been publicly accessible on npm since launch.