Is Your AI Chat Bot Spying On You?

The Perplexity AI Class Action and What It Means for Privacy

Mason & Perry LLP  |  April 8, 2026

You switched on “incognito mode” before asking your AI chatbot something sensitive. You figured that meant privacy. It turns out it may have meant nothing of the sort.

That is the core allegation in a sweeping 135-page class action lawsuit filed on March 31, 2026, against Perplexity AI, Inc. — one of the fastest-growing AI search engines in the country. The case is Doe v. Perplexity AI, Inc. et al, Case No. 3:26-cv-02803, filed in the U.S. District Court for the Northern District of California. And if the allegations are true, the privacy implications reach far beyond one company.

What Perplexity AI Is Accused of Doing

The complaint alleges that Perplexity embedded tracking tools — including Meta Pixel, Google Ads, Google DoubleClick, and Meta’s Conversions API — directly into its platform code. These tools, the lawsuit claims, automatically transmitted users’ conversations to Meta and Google without their knowledge or consent. The trackers allegedly captured the full text of user prompts and AI responses, along with email addresses, Facebook IDs, IP addresses, and device information.

That data was allegedly handed straight to two of the world’s largest advertising platforms — giving them a window into what users were privately asking an AI.

The “Incognito Mode” Problem

Perplexity offers an “incognito mode” feature that the company markets as creating “anonymous threads” that “won’t save to your history and expire after 24 hours.” Users who activated this mode reasonably believed they were getting a layer of privacy protection.

The lawsuit alleges they got no such thing. According to the complaint, the tracking continued even in incognito mode, and Perplexity never disclosed that its privacy feature was effectively a sham. Users who specifically sought out a more private way to interact with the AI were allegedly still having their conversations monitored and shared.

This feature-as-fiction theory is significant from a legal standpoint. When a company makes an affirmative representation about privacy protections and those protections do not exist, that conduct tends to attract claims under consumer protection statutes, state wiretapping laws, and privacy regulations — in addition to common law fraud.

Who Is Covered and What They’re Claiming

The proposed class includes all users who chatted with Perplexity between December 7, 2022, and February 4, 2026, whose data was transmitted to Meta or Google. A California subclass is also proposed. Notably, paid subscribers on “Pro” or “Max” plans are excluded — suggesting the tracking may have been tied to the free, advertising-supported version of the product.

The legal theories at play are likely to include violations of the California Invasion of Privacy Act (CIPA), the federal Electronic Communications Privacy Act (ECPA), and potentially unfair business practices under California’s UCL. Each carries its own damages framework, and some statutes allow for per-violation statutory damages — which, multiplied across millions of affected users, could mean substantial exposure for the company.

Perplexity has denied the claims. A company spokesperson stated that Perplexity had not been served with any lawsuit matching this description and could not verify the allegations.

Why This Case Is Bigger Than Perplexity

The Perplexity lawsuit reflects a broader wave of litigation targeting AI companies over privacy practices. In just the first months of 2026, class actions have been filed against Meta over its Ray-Ban smart glasses — alleging secret audio and video transmission — and against Mercor, an AI hiring platform accused of failing to protect the personal data of over 40,000 people. Another suit, filed against Eightfold AI, challenges AI tools that allegedly compile detailed profiles of job applicants from social media, device tracking, and cookie data without disclosure.

This isn’t a coincidence. Plaintiffs’ attorneys have recognized that AI platforms often collect far more data than users understand, and that the gap between what companies promise and what their technology actually does creates significant legal exposure. The same tracking pixels and third-party data-sharing arrangements that drove years of web privacy litigation are now embedded in AI products — and the lawsuits are following.

What This Means for Consumers

If you use AI chatbots — whether for work, research, or personal questions — the Perplexity case is a reminder that privacy labels and features may not reflect reality. A few practical considerations:

Read the privacy policy. Before trusting any AI platform with sensitive queries, check whether it has data-sharing arrangements with third-party advertisers. Many do.

Be cautious with “free” AI tools. Free tiers are often supported by advertising, which creates incentives to share data with ad platforms. Paid tiers may offer more genuine privacy protections.

Consider what you’re typing. If you wouldn’t say something in a crowded room, think twice before typing it into an AI chatbot that may be sharing your input with advertising companies.

Know your rights. If you used Perplexity between December 2022 and February 2026, you may be a member of the proposed class. As this litigation develops, affected users may have the opportunity to participate in a settlement or recovery.

The Takeaway

The Perplexity AI lawsuit is the clearest signal yet that AI companies will face the same kind of privacy reckoning that social media platforms did a decade ago. The stakes are high: AI chatbots often receive more sensitive and personal queries than a typical search engine, making unauthorized data sharing particularly invasive.

As this case moves forward, it will test whether courts are willing to apply existing wiretapping and privacy statutes to AI products — and whether the marketing language tech companies use to describe privacy features can survive legal scrutiny.

For consumers, the message is straightforward: incognito doesn’t always mean invisible.

 

Mason & Perry LLP represents individuals and groups in data breach and privacy class action litigation. If you believe your data was improperly collected or shared by an AI platform or technology company, contact us to discuss your options.

logo