Short answer: Two separate issues are being conflated. A senior U.S. official told Reuters that DeepSeek was helping Chinese military and intelligence operations and seeking restricted chips, but Reuters said it could not independently verify every underlying claim. Separately, DeepSeek’s own privacy policy says its Chinese company directly collects, processes, and stores personal data in China. The data-storage risk is documented; the broader claim that DeepSeek is actively powering China’s military remains a serious allegation rather than a fully proven public fact.
What the U.S. official alleged
In June 2025, a senior U.S. official told Reuters that DeepSeek was aiding China’s military and intelligence operations. The official also alleged that the company sought access to advanced Nvidia chips restricted under U.S. export controls through shell companies in Southeast Asia, and that user information and usage statistics could be shared with Beijing’s surveillance apparatus.
Those are attributed government claims, not a court finding. Reuters reported that it could not independently verify all of the details, including alleged references to DeepSeek in Chinese military procurement records.
“Powering the military” can describe very different things: direct software supplied to the People’s Liberation Army, use by military-affiliated universities or contractors, dual-use research, intelligence analysis, surveillance, logistics, cyber operations, or indirect benefits from access to advanced computing. Evidence for one category should not be treated as proof of all the others.
Recommended Free Tools
#1 Best Overall
What congressional investigators say
The House Select Committee on the Chinese Communist Party’s April 16, 2025 investigation, “DeepSeek Unmasked,” said its investigation found that DeepSeek funnels American users’ data to the People’s Republic of China through backend infrastructure connected to China Mobile. It also alleged that the model can censor or manipulate answers to meet Chinese Communist Party requirements, likely used distillation techniques involving leading U.S. models, and appears to have been built with advanced Nvidia chips restricted from export to China.
The committee’s conclusions are an official congressional investigation and important evidence of government concern, but they are investigative findings and allegations—not a judicial determination that every claim has been proved. A later committee letter cited reporting that U.S. officials believed DeepSeek supported Chinese military and public-security systems; that document is political corroboration, not independent technical proof (committee document).
What DeepSeek’s privacy policy confirms
DeepSeek’s English-language privacy policy, shown as last updated February 10, 2026, identifies Hangzhou DeepSeek Artificial Intelligence Co., Ltd., a company registered in China, as the service controller. It says DeepSeek directly collects, processes, and stores personal data in China (privacy policy).
The policy lists categories that may include:
- Account and contact information
- User inputs, chat content and uploaded material
- Device, network and log information
- Location information
- Cookies and similar technologies
- Information supplied when contacting DeepSeek
Retention varies by data type, sensitivity, purpose and legal requirements. For service provision, the policy says information may be retained while an account remains active and may be kept to investigate policy violations. The policy establishes collection and storage practices; it does not by itself prove that Chinese intelligence agencies accessed a particular person’s conversation.
What the China Mobile finding does—and does not—show
Security researchers told the Associated Press that code on DeepSeek’s website could send some user login information to China Mobile, a Chinese state-owned telecommunications company. DeepSeek separately acknowledged that user data is stored on servers in China.
These are distinct propositions:
- Observed technical behavior: code could transmit certain login information to a China Mobile destination.
- Company-declared storage: DeepSeek says personal data is stored and processed in China.
- Government access: a separate question requiring evidence of actual access.
- Military status: a U.S. designation or concern about China Mobile does not prove DeepSeek itself is a military company.
Publicly described evidence does not establish that China Mobile receives every prompt, file or chat.
Rank #3
Why Chinese jurisdiction matters
Cross-border transfer alone is not the whole issue. The relevant questions are which entity controls the service, where data is stored, which laws govern it, whether users can enforce deletion or access rights, and what contractual protections exist.
DeepSeek’s current terms say the service is operated by its Chinese entity and that use may be subject to export-control and sanctions laws (terms of use). Its open-platform terms state that disputes are governed by mainland Chinese law and may be heard by a court with jurisdiction over the company’s registered office (open-platform terms).
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →That creates a potential access and enforcement risk under Chinese jurisdiction. It is not proof that a government agency has read your chat. It also means U.S. contractual, regulatory and discovery remedies may be harder to use than with a domestic provider.
What information creates the greatest exposure?
For a personal-finance reader, the most dangerous mistake is treating a chatbot like a private notebook. Never submit:
- Passwords, API keys, recovery codes or authentication tokens
- Bank, brokerage, tax or credit-account numbers
- Social Security numbers or identity documents
- Medical, legal or employment records
- Customer data or other personally identifiable information
- Proprietary source code, trade secrets or unreleased business plans
- Government, defense or regulated information
- Precise location data or confidential family and financial details
Congressional investigators specifically described chat history, device information and typing-related information as data at issue, and said DeepSeek integrates tracking tools associated with Chinese technology companies (report; government copy). Those points should be understood as congressional findings, not proof that every client collects every listed signal.
Censorship, distillation and export controls
The committee said DeepSeek’s answers can be manipulated to align with CCP propaganda and Chinese law. Reuters also reported accusations that the service censors politically sensitive topics (Reuters report). A refusal or evasive answer is not automatically proof of state-directed propaganda; censorship, ordinary safety filtering, factual errors and deliberate influence are different claims.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesLikewise, alleged model distillation and use of restricted Nvidia chips are national-security concerns, but they do not demonstrate that a particular public chatbot session is a battlefield system. DeepSeek’s transparency page lists V3.2 (December 1, 2025) and V4.0 (April 24, 2026), so data flows and capabilities should be checked for the specific app, website, API, SDK or local model being used (transparency page).
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.International scrutiny is a warning, not a final verdict
South Korea’s National Intelligence Service accused DeepSeek of excessive personal-data collection, said user inputs were used for training, and raised concerns about advertising access and Chinese storage (Reuters). Reuters’ regulator factbox reported that Italy blocked the app after requesting information about personal-data use, while the Dutch privacy regulator opened an investigation and urged caution (factbox). These actions show concern; they are not final findings that every user’s data was unlawfully transferred or misused.
Should you stop using DeepSeek?
For sensitive work, the answer is yes
Government and defense personnel, regulated businesses, law firms, healthcare and financial organizations, companies with trade secrets, and developers handling credentials should not use the hosted service for confidential workloads unless their organization has independently approved the data flow, legal terms and controls. The documented China storage is sufficient reason for many such organizations to prohibit hosted use, regardless of the unresolved military allegation.
For low-risk experimentation
Generic brainstorming, public-text rewriting, translation and testing with synthetic data are lower-risk. Remove names, account details, unpublished facts, precise locations and confidential files first.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallSafer ways to use an AI model
| Approach | Privacy posture | Main trade-off |
|---|---|---|
| DeepSeek hosted app or website | Personal data is processed and stored in China under the current policy | Convenient, but unsuitable for many confidential workloads |
| Local DeepSeek model | Prompts can remain on a controlled machine if deployment is genuinely offline | Requires compatible hardware, updates and security monitoring |
| U.S.-hosted enterprise AI | May offer regional hosting, contracts, identity controls and retention settings | Higher cost and vendor-risk review still required |
| Self-hosted model from another provider | Maximum control over network and storage location | Hardware, patching, logging and incident response become your responsibility |
Local software such as Ollama or LM Studio can keep prompts on a machine, but a local model is not automatically safe. Telemetry, update services, extensions, exposed APIs or a compromised computer can still leak data. Hosted alternatives include OpenAI business products, Anthropic enterprise and Google Vertex AI; evaluate their current retention, training, location, encryption and incident-notification terms rather than assuming any provider is risk-free.
Practical exposure-reduction checklist
- Use synthetic or redacted data instead of real financial, customer or employee records.
- Never paste credentials; rotate any secret that may already have been submitted.
- Remove the app from government or corporate devices where policy prohibits it.
- Review network destinations and DNS requests for the specific client or API.
- Use mobile-device management, endpoint controls or approved domain blocks where appropriate.
- Delete conversations when available, while recognizing that deletion controls do not guarantee immediate or complete erasure.
- For organizational use, complete a vendor-risk and data-processing review before approval.
What remains unproven
- No publicly described evidence demonstrates that Chinese intelligence accessed every, or any particular, U.S. user’s conversation.
- The exact data sent to China can differ by current app version, website, API, SDK and local deployment.
- The public record does not quantify how much alleged military use is direct versus indirect.
- The restricted-chip and shell-company allegations rely substantially on official claims that Reuters could not fully verify.
- Regulatory scrutiny has not, on the evidence cited here, produced a universal final finding of unlawful misuse.
The Bottom Line
DeepSeek’s Chinese data storage and processing are documented by its own policy, creating a real jurisdiction and privacy risk. Claims that it is actively supporting China’s military and intelligence services are serious U.S. government and congressional allegations, but the public evidence is not complete. Keep confidential information out of the hosted service unless your organization has specifically approved it.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
