Can AI chatbots like Claude and ChatGPT report you to the police?

The short version

Consumer chatbots are online services, and their privacy policies say so. Anthropic and OpenAI both reserve the right to share user data with government authorities and law enforcement. That does not mean a person reads every chat. Both companies describe automated detection first, then human review of a small set of flagged conversations, then a decision.

The realistic risk for most readers is not a referral. It is forgetting that a chat which feels like a private notebook is stored on someone else's servers, can be read by reviewers if it is flagged, and can be requested by police with the right legal paperwork.

Route one: the company refers a flagged conversation

OpenAI described its process in an August 26, 2025 post. Conversations where users appear to be planning to harm others go to specialized pipelines reviewed by a small team trained on its usage policies. If the reviewers decide a case involves an imminent threat of serious physical harm to others, OpenAI may refer it to law enforcement. The same post said OpenAI was not referring self-harm cases to law enforcement, and instead points people to crisis resources such as 988 in the US.

Anthropic does not publish a matching blog post, but its privacy policy, effective September 10, 2026, says it may share personal data with government authorities or law enforcement when it has a good-faith belief that disclosure is reasonably necessary to comply with law or legal process, prevent serious harm to any person or to property, address fraud or other illegal activity, or protect the safety of Anthropic, its users or others. Its transparency hub separately reports 15,079 reports to the National Center for Missing and Exploited Children from January to June 2026, which is a legally required reporting channel for child sexual abuse material.

The Florida case shows how the referral route works. According to the arrest report as described by WINK News, Anthropic systems flagged statements about shooting up the Lee County Sheriff office, the content was escalated to a human review team, and that team reported it to law enforcement. The user later told the sheriff she used the chatbot like a diary. Tom's Hardware reports at least two other Claude conversations reached police in August 2026. These are news reports of a pending case, not a court finding.

Route two: police ask the company for your data

The second route starts with the police, not the chatbot. OpenAI publishes a law enforcement policy that sets the bar it says it applies to US requests:

• Account and other non-content records: a subpoena, court order, search warrant or equivalent.
• The content of your chats: only a valid warrant or equivalent.
• Emergencies: disclosure without that process when OpenAI believes in good faith there is a danger of death or serious physical injury and the data is needed to prevent it.
• Preservation: on a valid request OpenAI will preserve data for up to 90 days, extendable by another 90.

Deleting a chat does not always delete it

Retention matters because a request can only reach data that still exists. The OpenAI privacy policy says Temporary Chats are deleted within 30 days unless they must be kept for safety or legal reasons, and that it may keep data longer when legally required, for example after a lawful subpoena, or when content is banned for policy violations.

Google says in the Gemini Apps Privacy Hub that chats selected for human review are not deleted when you delete your activity and are kept for up to three years. It also tells users not to enter confidential information they would not want a reviewer to see.

Anthropic says in its privacy policy that conversations flagged for safety review can be used to improve its safety systems even if you opted out of model training.

What these policies do and do not cover

The policies above apply to consumer accounts. Both Anthropic and OpenAI say their consumer privacy policies do not apply to business offerings such as enterprise accounts or the API, which are governed by customer agreements. If you use a chatbot at work, your employer contract and admin settings decide retention and review.

None of the companies publish an exact list of words or thresholds that trigger review, so nobody outside them can tell you precisely what gets flagged. What the published text does make clear is the target: credible threats of serious physical harm to other people, child exploitation, and fraud or other illegal activity, plus whatever a valid legal order demands.

A practical way to think about it

• Write in a chatbot as if a reviewer could read it, because for flagged content one can.
• Do not type threats against real people, even as a joke or to vent. In the Florida case the written words themselves were the basis of the charge.
• If you are in crisis, contact a crisis line such as 988 in the US. OpenAI said in August 2025 that it was not referring self-harm cases to police, and it points users to these services.
• Use the privacy controls each service offers, such as Temporary Chat or Incognito, to limit what is kept, but know they do not exempt content from safety review or legal holds.
• For material that must stay on your own machine, a local model sends nothing to a provider. Our guides to running models on a Mac or Windows PC show how.
• This is general information about published company policies, not legal advice. If you are dealing with a real investigation, talk to a lawyer.

A useful next action

Open the data controls of the chatbot you use most, check whether chat history and model training are on, and decide which kinds of conversations belong in that service and which belong in a local tool or nowhere at all.