Google Chrome “quietly” installs a 4GB AI model on devices without permission: “If the user deletes it, Chrome re-downloads it”
Google has been automatically downloading a 4GB AI model file called “weights.bin” for its Gemini Nano on-device system into Chrome installations without user knowledge or consent, according to security researcher Alexander Hanff. The discovery is particularly concerning because even when users manually delete the downloaded file, Chrome automatically re-downloads it, preventing users from retaining control over their device storage and bandwidth. The installation occurs silently without user notification or the ability to opt out through standard settings. Chrome maintains approximately 67.97% global market share—affecting around 3.62 billion users according to StatCounter—making this practice potentially impactful across a massive audience. The incident raises significant privacy and consent issues, exemplifying broader concerns about how major software companies handle user data and control. This discovery adds to ongoing discussions about digital privacy and user autonomy in widely-used applications.