The Blind Spot Is the Point: Meta’s Incognito Chat and the Future of Private AI
Meta’s Incognito Chat is interesting not because it promises privacy, but because it makes privacy expensive. It limits what Meta can know, what Meta can monetize, and what Meta can hand over later. That is what makes the announcement worth taking seriously.
Meta has launched Incognito Chat with Meta AI, a way to talk to an artificial intelligence assistant on WhatsApp and the Meta AI app under privacy guarantees that, as Mark Zuckerberg puts it, are “similar to how end-to-end encryption means no one can read your conversations, even Meta or WhatsApp.” The system runs server-side AI inference—meaning the AI processes requests on remote servers rather than on your device—inside a hardware-isolated environment known as a trusted execution environment (TEE). In principle, that means even Meta cannot inspect users’ chats. Meta pairs that architecture with stateless processing, anonymous routing, and at least partially verifiable transparency measures.
Two design tradeoffs deserve attention because, in my view, Meta made the right call on both. First, the architecture makes personalized advertising harder. Second, it constrains trust-and-safety systems that depend on human review of flagged conversations. Both choices will draw criticism—from inside the company and from outside advocates of broader monitoring powers. Both are worth defending before the inevitable pressure campaign begins.
I have argued previously that hardware-backed confidential computing offers the most credible path to combining frontier-grade AI capabilities with meaningful data security. I have also argued that voluntary technical self-restraint by AI providers strengthens the case for legal protections for AI conversations. Incognito Chat is the first major consumer AI product that, at least on its face, appears to satisfy both halves of that argument.
My initial reaction, then, is simple: more of this, please—and from every provider.