Your AI Chatbot Was Selling You Out

Perplexity promised private AI search. A 135-page lawsuit alleges it was feeding your conversations to Meta and Google the whole time, even in incognito mode.

State of Surveillance Editorial Team

Computer screens displaying lines of code with colorful ambient lighting

TL;DR: A 135-page class action lawsuit filed March 31, 2026 in San Francisco federal court alleges Perplexity AI embedded Meta Pixel, Google Ads, Google DoubleClick, and Meta’s Conversions API trackers directly in its code. These tools allegedly sent user conversations (including prompts, responses, email addresses, IP addresses, and device information) straight to Meta and Google for ad targeting. The data flowed even when users activated “incognito mode,” which the lawsuit calls a “sham.” The complaint compares the trackers to wiretaps and names Perplexity, Google, and Meta as defendants. The class covers all US users from December 7, 2022 to February 4, 2026.

How the Data Pipeline Works

According to the complaint, Perplexity embedded multiple advertising trackers in its platform that activate the moment you open the home screen.[1] Here’s the chain:

  1. You type a question. Could be about a medical condition, a legal problem, your finances, anything.
  2. Before Perplexity even processes your query, the embedded trackers fire. Meta Pixel, Google Ads, and Google DoubleClick capture the data.[2]
  3. Meta’s Conversions API takes it further. CAPI creates a “direct connection” between Perplexity’s servers and Meta. It grabs the data server-side, meaning no browser extension, ad blocker, or incognito mode can stop it.[3]
  4. Google and Meta receive your conversation. Your prompts, Perplexity’s responses, your email, Facebook ID, IP address, and device information all flow to their ad platforms.[4]

The complaint alleges Meta specifically recommends Conversions API as a “workaround” to stop “savvy users” from blocking Meta Pixel tracking. Perplexity allegedly adopted it.[3]

The Incognito Mode “Sham”

Perplexity offers an incognito mode that promises to create “anonymous threads” that “won’t save to your history and expire after 24 hours.”[2]

The lawsuit says that’s meaningless. Because the tracking happens server-side through Conversions API, incognito mode has no effect on the data flowing to Meta and Google. Your conversations still get transmitted. The privacy setting is cosmetic.

The complaint calls it a “sham”: a privacy feature that gives users a false sense of security while their data gets piped to advertising platforms anyway.[4]

Who Gets What

According to the lawsuit, the tracking captures:[4]

Signed-In Users

Initial prompts are “always fed into Google’s and Meta’s ad platforms.” Reply selections throughout conversations are also shared. Email addresses and account info included.

Non-Signed-In Users

Even worse: “the entire conversation may be accessed by third parties like Meta and Google.” Plus IP addresses, device info, and browser fingerprints.

What Meta Gets

Full chat text, email, Facebook ID, IP address, device and browser information via Meta Pixel and Conversions API.

What Google Gets

User queries and interactions via Google Ads and DoubleClick tracking pixels embedded in Perplexity’s code.

Perplexity’s Response: “We Haven’t Been Served”

When asked about the lawsuit, Perplexity spokesperson Jesse Dwyer said: “We have not been served any lawsuit that matches this description, so we are unable to verify its existence or claims.”[6]

The complaint also alleges that Perplexity doesn’t require users to agree to its privacy policy before using the service, and that the privacy policy isn’t even linked from the Perplexity web app.[2] You can’t consent to terms you can’t find.

The Timing Isn’t Accidental

This lawsuit landed the same week state privacy enforcers announced they’re escalating AI enforcement. At the IAPP Global Privacy Summit (March 30–April 2, 2026), regulators made their intentions clear:[7]

  • California’s Privacy Protection Agency: Deputy Director of Enforcement Michael Macko said current CCPA fines “could become a cost of doing business if they’re not higher.” The agency launched a surveillance pricing sweep in January 2026.
  • Connecticut: Deputy Associate AG Michele Lucan confirmed an active investigation into a “major AI chatbot’s” compliance with the Connecticut Data Privacy Act. New AI transparency provisions are now enforceable.
  • California AG’s office: Investigating X’s Grok AI for producing nonconsensual deepfakes. The AG’s highest CCPA fine so far: $2.75 million.

The Consortium of Privacy Regulators is coordinating enforcement across state lines. AI companies that treated privacy as an afterthought are about to find out what happens when regulators compare notes.

Why This Matters Beyond Perplexity

This is the first major class action targeting an AI chatbot for sharing user conversations with advertising platforms. It won’t be the last.

Think about what you’ve asked an AI chatbot. Medical questions. Legal problems. Relationship issues. Financial worries. Job searches. Every AI platform that embeds third-party tracking sends that data somewhere. Perplexity got caught first.

The lawsuit establishes a template. If Meta Pixel and Conversions API are embedded in one AI search engine, they’re likely embedded in others. The complaint’s core argument (that server-side tracking constitutes wiretapping) applies to any AI platform using the same tools.

What You Can Do Right Now

Stop Using Perplexity for Sensitive Questions

Until Perplexity addresses these allegations, assume your conversations are being shared. Use privacy-focused alternatives for anything personal.

Don’t Trust “Incognito Mode”

On any AI platform. Server-side tracking bypasses browser-level privacy controls. Incognito mode on an AI chatbot doesn’t mean what you think it means.

Use Network-Level Blocking

Browser extensions can’t stop server-side API calls. Consider DNS-level blocking (like NextDNS or Pi-hole) that can intercept tracking domains before they resolve.

Check Your Rights

If you used Perplexity between December 2022 and February 2026, you may be part of the proposed class. California residents can file CCPA deletion requests and demand disclosure of what data was shared.

The Bottom Line

Perplexity marketed itself as a smarter search engine. Turns out, it may have been a smarter ad funnel.

The complaint alleges that from day one, your questions went to Meta and Google for ad targeting. Your incognito mode didn’t protect you. The privacy policy you couldn’t find wouldn’t have helped if you could. And the server-side tracking was specifically designed to defeat the tools privacy-conscious users rely on.

Perplexity says it hasn’t been served yet. When it is, it’ll have to explain why a company selling “private AI search” embedded the same advertising trackers it was supposed to be an alternative to.

References

  1. The Almanac: Bombshell AI class action suit alleges users’ chats with Perplexity go straight to Meta, Google (April 2, 2026)
  2. Local News Matters: Class-action lawsuit alleges Perplexity sent user chats to Google, Meta without consent (April 2, 2026)
  3. Business Story: A lawsuit alleges Perplexity’s “Incognito Mode” is a “sham” (April 2, 2026)
  4. Android Authority: Perplexity quietly shared private user info, lawsuit says (April 2026)
  5. ComplianceHub: CCPA in the Age of AI: What the Perplexity Lawsuit Means for Privacy Compliance
  6. Tom’s Guide: Perplexity’s ‘incognito mode’ is a sham, lawsuit alleges
  7. IAPP: Higher fines, age assurance on California’s agenda; enforcement to ramp up in other states (April 2026)