An Attack Vector No One Talks About

>I tried today.ai yesterday

>> Today learns your day, builds a living memory of what matters

>> It helps before you ask

>> We may collect the following categories of information: — name, email address, and authentication credentials (including third-party sign-in tokens). — name, email address, and authentication credentials (including third-party sign-in tokens). — device identifiers, browser type, operating system, IP address, referral URLs, pages visited, and feature interactions. — information you authorize third-party services to share with us through integrations you enable.

>It scanned my disk without my consent during onboarding, which is already a very bad start

Not really sure what you expected a program meant to scan your machine to do outside of scanning your machine given a privacy policy telling you the extent of what they might collect.

edit: Also, literally everyone was talking about this exact vector when claw/hermes/etc launched as the direct reason requiring that "you have to buy the machine it'd be running on": so that un-auditted software exfilling who knows what data doesn't sit very conveniently in your own personal /home.

All cloud services have this risk ( using your personal info against you, leaking your personal info by getting hacked, etc. )

Local services are the solution to this.