Claude's Conversation Search Tool Still Returns Deleted Chats
Privacy Issue with Deleted Conversations
A Claude Pro user with data training opted out and chat memory enabled reported that Claude's conversation search tool continues to return content from conversations that have been previously deleted. The user specifically tested this by asking Claude to search for a past conversation, and it returned substantive content including the conversation title, message count, and excerpts.
Key Details from the Report
- The chat links for deleted conversations are dead - clicking them returns nothing
- However, the search tool still surfaces the content from these deleted chats
- The user had last engaged with the specific chat on December 3 and is certain they deleted it last year
- This appears to contradict Anthropic's privacy documentation which states that deleted conversations are 'immediately deleted from your conversation history' and 'automatically deleted from our back-end within 30 days'
- The conversation search tool doesn't appear to be hooked into either deletion timeline
User Actions and Implications
The user has emailed [email protected] about the issue and flagged it on Reddit for community awareness. The discovery suggests that if you're relying on deletion as a privacy measure, 'deleted' may not mean 'unsearchable' in Claude's current implementation.
📖 Read the full source: r/ClaudeAI
👀 See Also
Open-Source Attack Surface Management Cheat Sheet Released
A developer has open-sourced an Attack Surface Management cheat sheet that covers practical workflows, tools, and references. The project includes sections on asset discovery, infrastructure tracking, reconnaissance tooling, automation workflows, and learning resources.
Hidden Audio Signals Hijack Voice AI Systems with 79-96% Success Rate
Research shows imperceptible audio clips can force LALMs to execute unauthorized commands like web searches, file downloads, and email exfiltration with 79-96% success across 13 models including Mistral and Microsoft services.
BlindKey: Blind Credential Injection for AI Agents
BlindKey is a security tool that prevents AI agents from accessing plaintext API credentials by using encrypted vault tokens and a local proxy. Agents reference tokens like bk://stripe, and the proxy injects the real credential at request time.
Claude Cage: Docker Sandbox for Claude Code Security
A developer created a Docker container called Claude Cage that isolates Claude Code to a single workspace folder, preventing access to SSH keys, AWS credentials, and personal files. The setup includes security rules and takes about 2 minutes with Docker installed.