PSA: Anyone with a link can view your Granola notes by default
mediumnewsLLM-Specific
securityprivacy
Source: The Verge (AI)April 2, 2026
Summary
Granola, an AI-powered note-taking app that records meetings and generates summaries, makes your notes viewable to anyone who has the link by default, despite claiming notes are "private by default." Additionally, Granola uses your notes for internal AI training unless you actively opt out of this practice.
Classification
Attack Type
PII Leakage
Attack SophisticationTrivial
Impact (CIA+S)
confidentiality
AI Component TargetedAPI
Affected Vendors
Related Issues
Monthly digest — independent AI security research
Original source: https://www.theverge.com/ai-artificial-intelligence/906253/granola-note-links-ai-training-psa
First tracked: April 2, 2026 at 08:00 PM
Classified by LLM (prompt v3) · confidence: 85%