Dropbox: How to opt out of 3rd party AI partner access to your Dropbox
twitter.com
twitter.com
https://www.dropbox.com/account/ai
and the setting for team accounts in the admin console is here:
https://www.dropbox.com/team/admin/settings/ai
Ours (for a US business account) was on by default. The text for the setting is:
> Let team members use artificial intelligence (AI) so they can work faster in Dropbox. We only use technology partners we have vetted. Your organization’s data is never used to train their internal models, and is deleted from third-party servers within 30 days.
There's a "learn more" link that goes here:
https://help.dropbox.com/view-edit/privacy-settings-dropbox-...
Dropbox claims that they "won’t let our third-party partners train their models on our user data without consent". The page further claims that the participation option is on by default for teams "participating in the Dropbox AI alpha", but I don't think we signed up for any such thing and the option was still on for us. I checked the settings and we are not currently enrolled. I have zero confidence that "consent" to use our data for model training won't also default to opt-in.
The page further states that Dropbox currently has one AI partner -- OpenAI.
> "Your files within Dropbox are sent to a third-party AI only when you chose to interact with AI powered features. For example, when you ask a question about a file. "
> "If you or your team is participating in the Dropbox AI alpha, the Third-party AI toggle in your account settings is turned On by default. Only the content relevant to an explicit request or command is sent to our third-party AI partners to generate an answer, summary, or transcript."
Basically, its saying "if you use AI tools, we'll send your data to a 3p, but if you don't, we're not".
The issue really is if they turned on a feature in the future "ask a question about this document" and you didn't know it meant that the document was sent over to OpenAI.
It turns itself back on??? So, what's the point of the toggle then?
I suspect there is a Great Deal of Precautionary Rationale (eh) protecting the Eurosphere from the worst privacy abuses.
I really don't get what drives companies like Dropbox to throw their carefully built up reputation under the bus like this.
The tech community that's clued into this is such a small percentage, unfortunately.
Funny anecdote: remember when those "I do not consent to facebook using my data" messages that were, ironically, posted to people's facebook walls?
And, well, if OpenAI just happens to gain access to a trove of data by providing the service... ¯\_(ツ)_/¯
again, don't trust future drop box but the hidden switch here is willfully interacting with dropboxs' openAi integration.
If you force people to do something they are more likely to do it then if you don't force them. Especially if they don't consent to doing it.
In the "What's new" part within the Dropbox environment, I did find a note dated October 10, 2023:
Quickly find the content you need with Dropbox AI
Dropbox AI for search helps you get the information you need without the hassle of manually searching through Dropbox. Ask a question about your Dropbox content and get a response within seconds. You can also find the files you need with everyday language instead of searching by keywords, and search results now come with a brief summary of each file.
Then, once you’ve opened individual files, Dropbox AI for file previews now lets you save time and effort by summarizing your content, from long documents to lengthy videos, into a clear and concise explanation with the click of a button.
Dropbox AI is currently in alpha and available in the US in EN only for Dropbox Pro, Standard, Advanced, Essentials, Business, and Business Plus. Some features may be available soon for eligible non-US customers to test.
FWIW, just checked mine (EU-based "pro" account), and the setting is there but was OFF. i have never specifically engaged any features regarding AI in dropbox.
i do recall seeing a popup in the web interface sometime in the past month about having AI summarize file content and i closed the popup without tapping anything which remotely appeared to be a consent button.
I would call that a win for European privacy regulation.
failure of imagination.
Hi dropbox, show me the costco receipt for the inflatable mattress i bought a few months ago.
Hi dropbox, show me the widget specs from ACME for 2025.
> Your files within Dropbox are sent to a third-party AI only when you chose to interact with AI powered features. For example, when you ask a question about a file.
puts the burden on the user to understand what an "AI powered feature" is
really, the trouble is Dropbox is outsourcing your private files to a third party and masking that via a optin (in the US) toggle.
I don't think users should have to worry that their service negotiated a invasive privacy process with a third party and they aren't being forthright about how it leaves the premise.
I've seen skiff shilled a few times here and on the twitter thread but the website is too annoying for me lol.
Currently thinking I'm going to mess with filen.io tonight. It has a linux client and is e2e encrypted. Still looking and open to suggestions though.
Mega.io
Proton Drive
Rclone to your own encrypted bucket
Mountain Duck / Cloud Mounter to your own encrypted bucket
Edit: based on their help page "In countries with the preferred language set to English. Excluding Canada, the UK (United Kingdom), and countries within the EEA (European Economic Area)." https://help.dropbox.com/view-edit/privacy-settings-dropbox-...
I’m also in the EU, and the button was switched off for me too.
> Use artificial intelligence (AI) from third-party partners so you can work faster in Dropbox. We only use technology partners we have vetted. Your data is never used to train their internal models, and is deleted from third-party servers within 30 days.
The data isn’t used for training, only for inference & DropBox and OpenAI pinky promise to delete any data sent to them within 30 days.
imagine the wasted compute if the AI just went and scanned everything.
this is a adhoc service one-off. definitely turn it off if you don't want your files scanned by OpenAI.
but the cost of moving everyones file to an AI would be absurd.
Talk about scummy....
> Get access to products and features that Dropbox is still testing and evaluating, and give feedback to help our product teams build the best final product.
still should be optin universally, but it's unlikely they're wasting compute scanning before a user even wants the service.
https://help.dropbox.com/view-edit/privacy-settings-dropbox-...
Heres what the link looks like for me in the US: https://www.dropbox.com/account/ai
Paid subscribers can see it in US, not sure whether it depends on the subscription tier though.
> did I agree to this somewhere?
The CTO of Amazon uses Dropbox?!
This is dark patterns all over again
I just put everything in Google Drive and a USB stick and have never looked at DB again.
Am I missing something about being customer centric to force them to work for free for your software to manage it in addition to paying for it?
I understand how this might be in Dropboxes to let third parties create “synthetic data” of users proprietary data. Using it “at my request” for my benefit is the first step.
Maybe Dropbox could just opt put off their partners to not keep their customers information.
I didn’t think this would be the thing that got me to cancel and move Dropbox to something slower like Sync.com, but here we go.
Sure, because they paid you money for access and are very trustworthy people.
https://arstechnica.com/information-technology/2023/12/dropb...
https://i.imgur.com/qUKdMcB.png
I'm incensed about this. I guarantee I never activated this setting or anything remotely like it, or ever used any features that would justify it. This really crosses a line for me.
Make the choice once, up front, and then you can’t be surprised by things like this.
Think of all of the email, Google Docs, and other data that Alphabet has that it can use to train and improve its models. OpenAI has limited ways to get non-public text data unless Microsoft is giving them some data from Office users, Hotmail users.
Just my two cents. And whatever Dropbox is doing with retrieval augmented generation (RAG) / "new+better search" with the OpenAI APIs: I'm certain it could be done with less latency and probably would cost less if the RAG 'feature' / 'new search' was built in house at Dropbox.
My free personal account (still for work) does not have any active third party integration.
Glad I never gave in and used this nonesense.
That's abusive.
It took a while, but the arc of history is starting to bend in favour of that guy who said 'just use rsync' on Drobox's Show HN post in 2007.
It be interesting to see a breakdown on "time spent" between the people who went with Dropbox and started syncing stuff right away VS the people who first setup their own infrastructure to do the same thing.
For better or worse, even enough grad students at MIT (which used to be one of the more computers-clueful places) used Dropbox so heavily that they included the Dropbox logo on the grad class ring:
https://thetech.com/2013/09/06/gradrat-v133-n35
The class rings have considerable symbolism, and are very important to some. I've heard that the rings can also be real icebreakers at some startup events (between people with MIT connections):
That's because OS's don't bother to support rsync with good UX. That's what the old "My Briefcase" feature in Windows 9x was all about. It even had special-case support for difference merging (or "reconciliation") which rsync alone doesn't quite provide.
It's only when they get screwed by the vendor that they realize that having a non-commercial, non-enshittified alternative is crucial to counterbalance tech company malfeasance.
I do rsync too (robocopy, to be exact), and I prepaid the server for 2 years, but still, dropbox plays an important role in ensuring longevity of my data.
We need blanket minimum privacy protections at a national level, and they should treat internal repurposing of data the same as third party sharing.
Since all major players in our industry have shown they can’t be trusted to curate large collections of sensitive data, inclusion in such internal datasets should be opt in as well.
Dropbox is a poster child for “this should be E2E encrypted”, so, yes, I’m arguing they should get your explicit opt-in before they are allowed to store unencrypted data or escrow keys on their end, and that the opt-in shouldn’t be required to use their services.
how would you implement some very trivial features like even being able to search though
Dropbox is sharing your files with AI partners without opt-in