Before You Upload: 12 Types of Information You Should Never Share With an AI Tool

Artificial intelligence tools can help people summarise documents, draft emails, organise research and solve everyday problems.
Their conversational design can make them feel private.
You type naturally, receive an immediate response and continue as though you were speaking to a trusted assistant.
However, an AI platform is still a digital service.
The information you enter may be processed, stored or handled according to the provider’s current policies and settings.
This does not mean you should avoid AI completely.
It means you should pause before uploading information that could harm you, your family, your employer or your customers if it became exposed or misused.
Here are twelve categories of information that deserve particular caution.
1. Passwords and Security Codes
Never enter passwords, PINs, backup codes or one-time verification codes into a general AI tool.
This includes credentials for:
Email accounts
Banking applications
Social media
Workplace systems
Cloud storage
Online shops
Government services
An AI assistant does not need your real password to help you create a security checklist.
Use fictional examples instead.
A trusted password manager is more appropriate for storing login credentials.
2. Banking and Payment Information
Do not upload:
Complete card numbers
Bank account details
Security codes
Mobile banking passwords
Payment authentication messages
Cryptocurrency recovery phrases
Photographs of payment cards
You can ask general budgeting or financial-organisation questions without revealing identifying financial information.
When professional financial guidance is needed, use an appropriately qualified adviser and secure communication method.
3. Government Identification Documents
Passports, driving licences, national identity cards and immigration documents contain valuable personal information.
Avoid uploading full copies unless the platform has been specifically approved for that purpose and you understand the security requirements.
A general AI chatbot should not need your real document to help you understand a form.
Remove names, identification numbers, photographs, signatures and barcodes from examples.
4. Medical Records
Health information can be highly sensitive.
Be cautious with:
Test results
Prescription records
Medical photographs
Hospital letters
Mental-health reports
Insurance information
Children’s medical documents
AI may help explain general health terminology, but it can misunderstand information or provide unsuitable advice.
Remove identifying details and consult a qualified healthcare professional for diagnosis or treatment decisions.
5. Confidential Workplace Documents
Employees may upload a report because they want a quick summary or improved wording.
The document may contain information that belongs to the employer.
Examples include:
Internal strategy
Financial forecasts
Customer lists
Unreleased products
Employee records
Security procedures
Legal correspondence
Private meeting notes
Review your organisation’s AI policy before using workplace information.
When no policy exists, assume confidential material should not be uploaded to a public tool.
6. Customer and Client Information
Business owners are responsible for protecting customer data.
Do not enter:
Full customer names
Addresses
Payment information
Purchase histories
Private complaints
Health details
Account credentials
Confidential project materials
You can remove identifying details and use labels such as “Customer A.”
Even after anonymising information, check whether the remaining details could still identify the person.
7. Private Information About Children
Children cannot always understand the long-term consequences of digital sharing.
Avoid uploading:
School records
Home addresses
Daily routines
Identification documents
Medical information
Private photographs
Live location
Detailed behaviour reports
Parents and carers should consider whether sharing the information is necessary, proportionate and safe.
A useful parenting question can usually be asked without exposing a child’s identity.
8. Legal Documents and Case Details
Contracts, disputes and court matters may contain sensitive or privileged information.
Do not assume that an AI conversation has the same confidentiality protections as communication with a solicitor.
Be careful with:
Signed agreements
Witness statements
Evidence
Settlement discussions
Employment disputes
Family-law records
Criminal allegations
AI can explain general legal concepts, but high-stakes legal decisions deserve professional advice.
9. Intimate Photographs or Messages
Never upload intimate material merely to receive an opinion, translation or analysis.
Once highly personal content enters a digital system, you may lose control over how it is processed.
This includes private material belonging to another person.
Sharing someone else’s intimate content without permission may also be harmful or unlawful.
Use non-identifying descriptions when seeking general guidance.
10. Trade Secrets and Unpublished Intellectual Property
Creators and businesses should protect valuable original work.
Be cautious with:
Unpublished manuscripts
Patent ideas
Proprietary formulas
Source code
Business methods
Confidential designs
Unreleased campaigns
Research findings
Read the platform’s data-use terms before entering original material.
Consider using approved enterprise tools, local systems or professional confidentiality agreements where necessary.
11. Exact Travel Plans and Live Location
Avoid combining your full name, home address and real-time travel details inside an AI conversation.
Information such as:
“I live alone at this address and will be away for three weeks”
creates unnecessary risk.
You can ask for travel-planning help using general details.
Share only the information required for the task.
12. Other People’s Secrets
The information may not belong to you.
A friend, employee, partner or customer may have trusted you with something private.
Before entering it into AI, ask:
Do I have permission?
Is the person identifiable?
Is sharing necessary?
Could this harm them?
Can I describe the situation anonymously?
Technology does not remove your duty to respect another person’s privacy.
Use the Minimum-Information Rule
Share only what the task genuinely requires.
For example, instead of pasting an entire employment contract, describe the relevant clause without names or signatures.
Instead of uploading a customer complaint containing personal details, summarise the issue anonymously.
The less sensitive information you provide, the smaller the risk.
Redact Before Uploading
Redaction means removing or hiding confidential details.
Check for:
Names
Addresses
Account numbers
Signatures
Photographs
Dates of birth
Reference numbers
Hidden document metadata
Do not assume that placing a black shape over text permanently removes the information.
Use proper redaction tools when working with important documents.
Review the Platform’s Current Policies
Different AI tools handle information differently.
Before using one for sensitive work, review:
Data retention
Training settings
Account controls
Deletion options
Business privacy terms
Regional data processing
Third-party access
Policies can change.
Review them regularly rather than relying on assumptions.
Create a Personal Upload Checklist
Before entering information, ask:
Does this contain personal data?
Does it belong to someone else?
Would exposure cause harm?
Can I remove identifying details?
Is this tool approved for the task?
Do I understand how the data may be used?
Is there a safer way to receive help?
When uncertain, do not upload the material.
Final Thoughts
AI can help you work more efficiently, but convenience should never replace privacy awareness.
Passwords, financial records, private health information and confidential documents deserve strong protection.
Use the minimum information required, remove identifying details and understand the platform before sharing valuable content.
The safest prompt is often the one that explains the problem without exposing the person behind it.