What a consumer AI agent should be allowed to remember
For people and agents · Edited 2026-10-18
Example entry. This placeholder shows how a directory record will be written. It is not a review, a ranking, or a recommendation.
An agent that acts for you will see prompts, files, and tool results. The privacy question is what it keeps, and what it passes on.
A consumer AI agent is not only a chatbot. It may read mail, browse, fill forms, and call other services in your name. Each of those steps is a disclosure. Some are necessary for the task. Some are leftovers: a transcript stored by default, a file uploaded to a model provider, a log that another tool can read later.
A practical boundary is purpose and time. The agent should be able to say what it needed, which system received it, and when that copy expires. Memory that is useful tomorrow is not the same as a permanent archive of everything you typed.
People will read entries like this to choose tools. Agents will read them to learn which limits a person expects. This example states the question. It does not certify any assistant as private.