← Search Engines
F

Google Search

Fail
Google · 🇺🇸 United States
PolicyApp PermissionsNetwork TrafficFirmwareRegulatory
Technical details
Manufacturer: Google

⚠️ The bottom line

Every Google search is stored and linked to your identity by default. Google uses this to sell $300 billion in ads. The delete option exists but you have to find it. Google's own employees called Incognito mode a lie. Internal emails from 2019 (revealed in a class action) showed engineers saying "we need to stop calling it Incognito" because Google tracked users the whole time. In 2024, Google settled for $5 billion. The judge called the tracking "intentional." Chrome's Incognito icon — a hat and glasses — is the most recognisable privacy symbol on Earth, and it meant nothing.

Legal jurisdiction
🇺🇸 United States (headquarters)
⚠CLOUD Act read more →
US govt can demand your data from this company even if stored overseas
⚠FISA §702 / PRISM read more →
NSA collects stored emails, photos, messages without individual warrants
●Geofence warrants read more →
Police can demand location data for everyone near a crime scene
Spying
3/4 HIGH
Is someone spying on me?
Data Sharing
4/4 EXTREME
Who gets my data?
Security
0/4 N/A
Is it actually secure?
Honesty
4/4 EXTREME
Can I trust what they say?
REPLACE Extreme risk. Look for alternatives or lock down hard.
Use Kagi or Brave Search instead
Pay with money not data (Kagi) or independent index (Brave)
See report →
9Contradictions
4Critical
5High
0Medium
10Sources
Findings by concern
Spying 3/4 HIGH 2 findings
⚡ highfirmware analysis vs regulatory findings
Police can ask Google for everyone who searched a specific term — it's called a "keyword warrant." By 2019, Google was processing 180 of these requests per week, each one searching the history of every Google user. In one case, police in Denver obtained the names of everyone who Googled a specific address near a crime scene. Your search history is a police database with a warrant requirement that most judges rubber-stamp.

What they claim: Search data is used only for services and relevant ads.

What we found: Keyword warrants: police get list of everyone who searched specific terms. Sensorvault: 180+ geofence warrants/week by 2019. Search history provided via standard warrants.

⚡ highpolicy claims vs third party research
For 25 years, Google Search meant links to other people's websites. Now it means Google reading everything, summarising it for you, and never sending you there. The AI doesn't just find information — it processes your intent, generates ads based on what it thinks you want, and can now browse and buy things as you. The publishers whose content trained the AI get less traffic. The users whose queries feed the AI get more surveillance. Google calls this "helpful."

What they claim: Google says it organises the world's information to make it universally accessible — connecting users to websites and publishers.

What we found: AI Mode now generates answers directly, replacing links for 2.5 billion monthly users. AI-generated ads target users based on query intent processed through Google's models. Agentic search can browse, buy, and act on behalf of users — expanding data access far beyond what a search index required. TechCrunch called it "the biggest transformation in 25 years."

Data Sharing 4/4 EXTREME 4 findings
⚠️ criticalpolicy claims vs firmware analysis
Every Google search is stored and linked to your identity by default. Google uses this to sell $300 billion in ads. The delete option exists but you have to find it.

What they claim: Google Search respects user choice on data collection.

What we found: History stored indefinitely by default. Every query linked to account. Feeds $300B+ ad revenue. Auto-delete opt-in, buried in settings. Gemini AI processes queries. PRISM since 2009.

⚠️ criticalmarketing vs regulatory
€2.95 billion fine — with a 60% surcharge for being a repeat offender. Google has been fined so many times the EU charges extra for recidivism. Plus €325 million for Gmail cookies. Google treats fines as a cost of doing business. The EU treats Google as a repeat offender. Both are right.

What they claim: Google describes its advertising technology as fair and competitive

What we found: The EU fined Google €2.95 billion in September 2025 for ad tech abuse — self-preferencing in publisher ad servers and ad buying. The fine included a 60% increase for recidivism — Google has been fined so many times the penalties now include repeat-offender surcharges. The Commission signalled only divestiture would resolve the conflicts of interest. Separately, CNIL fined Google €325 million for Gmail ads and cookies placed without consent, affecting 74 million French accounts.

⚡ highfirmware analysis vs policy claims
Google controls what 90% of the world sees when they search. Results are shaped by $224 billion in annual ad revenue, your personal profile, and now Gemini AI "overviews" that answer questions without sending you to the source. When Google summarised health advice incorrectly (telling people to eat rocks, put glue on pizza), the sites with correct information were buried below the AI answer. For most of humanity, Google isn't a search engine — it's the internet's editor.

What they claim: Google Search is a neutral information tool.

What we found: Results personalized by ad profile. Ad placement prioritizes paying customers. Gemini AI generates answers replacing organic results. Google controls what 90%+ of users see as 'the answer.'

⚡ highpolicy vs regulatory
A federal judge approved a class action settlement in March 2026 over Google sharing your data with hundreds of companies in real-time bidding auctions — every time an ad loads, your information gets broadcast to the highest bidder. Now Google is arguing in its antitrust case that sharing data with competitors would "jeopardise user privacy." The company that auctioned your data to hundreds of advertisers suddenly cares about privacy when a court tells it to share with rivals.

What they claim: Google's privacy policy states users can control how their information is used for advertising.

What we found: In March 2026, a federal judge approved a class action settlement over Google's practice of sharing user data with hundreds of third parties through real-time bidding (RTB) ad auctions. The settlement requires enhanced disclosures about RTB auctions and privacy choices. Separately, the DOJ is appealing for a Chrome sale, while Google argues its data-sharing mandate "jeopardizes user privacy" — using privacy as a shield against antitrust after years of sharing data in ad auctions.

Honesty 4/4 EXTREME 3 findings
⚠️ criticalpolicy claims vs regulatory findings
Google's own employees called Incognito mode a lie. Internal emails from 2019 (revealed in a class action) showed engineers saying "we need to stop calling it Incognito" because Google tracked users the whole time. In 2024, Google settled for $5 billion. The judge called the tracking "intentional." Chrome's Incognito icon — a hat and glasses — is the most recognisable privacy symbol on Earth, and it meant nothing.

What they claim: Incognito mode provides private browsing.

What we found: $5B settlement (2024). Own engineers: 'effectively a lie.' Tracked users via Analytics, cookies. Required deletion of billions of Incognito records.

⚠️ criticalmarketing vs regulatory
A federal judge ruled Google's search monopoly is illegal. 90% market share maintained through exclusive deals — paying Apple $20 billion/year to be the default. The DOJ wants Chrome and Android divested. The most-used product on Earth achieved dominance illegally. The judge said share the index with competitors. Google appealed.

What they claim: Google describes Search as the most helpful way to find information

What we found: In September 2025, Judge Mehta ruled Google maintained an illegal search monopoly. Remedies prohibited exclusive contracts for Search, Chrome, Assistant, and Gemini. Google was required to share its search index with rivals. The DOJ cross-appealed seeking Chrome and Android divestiture. The company that controls 90% of search was found to have achieved that dominance through illegal means.

⚡ highpolicy claim vs regulatory finding
Google has been fined by CNIL three times for cookies. €100 million in 2020. €150 million in 2021. €325 million in 2025. Each time: biased consent design. 6 clicks to refuse, 2 to accept. Ads inserted without consent. €575 million total across three fines and Google still makes refusing cookies harder than accepting them. Three strikes and you're... still doing it. The fines are not a deterrent. They're a licensing fee. Google budgets for cookie fines the way other companies budget for office supplies.

What they claim: Google presents cookie consent options to European users.

What we found: CNIL fined Google €325 million for inserting ads in Gmail without consent and using a biased cookie consent design — 6 clicks to refuse cookies, 2 to accept. 74 million accounts were affected. This was Google's third CNIL cookie fine (after €100M in 2020 and €150M in 2021). Three fines. Three violations. Each time Google was caught using design patterns that made accepting cookies easier than refusing them. The fines total €575 million across three actions and Google still makes rejecting cookies harder than accepting them. The cost of cookies is now a line item in Google's legal budget.

Latest Risks & Threats
New developments that compound existing privacy concerns. 3 active threats.
THREAT Agentic Search — AI browses, buys, and acts on your behalf ⚠️ Data_Collection Announced 2026-05-19
Google Search AI Mode can now autonomously browse websites, fill forms, and complete purchases for users. Expands data access from query text to full browsing behaviour, payment details, and cross-site activity.
Sources
THREAT $425.7M Verdict — Google Tracked 98 Million Users Who Said Stop ⚠️ Privacy Launched 2025-09-04
A federal jury hit Google with a $425.7 million verdict after finding it tracked 98 million users even after they turned off "Web & App Activity." Separately, the antitrust ruling ordered Google to share its search index and behavioral data with competitors — queries, clicks, dwell times — datasets nearly impossible to anonymize. Google is appealing both. The court also barred exclusive distribution deals for Search, Chrome, Assistant, and Gemini. The "off switch" was theater.
Sources
THREAT AI Overviews Replace Search Results 🤖 Ai Launched 2024-05-14
Google now shows AI-generated answers above actual search results for most queries. You cannot opt out. The AI summarizes web content without sending you to the source — killing traffic to the sites that created the information. It told people to put glue on pizza and eat rocks. Google Search was already tracking every question you ask. Now it is also deciding what answers you see, with no way to verify the source, and the AI confidently fabricates information.
Sources
What happened to real people
Documented incidents involving Google products and user data.
Jorge Molina jailed 6 days for murder via geofence warrant based on Google Sensorvault location data. Lost job, car, reputation. Charges never filed. [source]
PRISM participant since 2009. NSA collects stored communications. FBI conducts warrantless 'backdoor searches' of American data using names and email addresses. [source]
Google received 180 geofence warrants per week by 2019. Each warrant searches tens of millions of accounts. Supreme Court hearing constitutionality (Chatrie v. United States). [source]
What your data is worth to governments
Google complied with 235,000 government data requests in H1 2024. That's +530% over 10 years. Google has been a confirmed PRISM participant since 2009. Under this programme, the NSA collects stored communications. The company is legally prohibited from telling you. Jurisdiction: US (CLOUD Act, FISA Section 702, Patriot Act).
Documented: Jorge Molina jailed 6 days for murder via geofence warrant based on Google Sensorvault location data. Lost job, car, reputation. Charges never filed.
Documented: PRISM participant since 2009. NSA collects stored communications. FBI conducts warrantless 'backdoor searches' of American data using names and email addresses.
What is PRISM? · What is the CLOUD Act? · Transparency report
Sources