Security1 publisher2 min readPublished
Meta AI's suggested question assembled two children's names, birth dates and a deleted photo
Kalie Robins clicked a question Meta AI put under a video of her daughter, and it returned both children's names and birth dates, a photo her mother had posted years ago, and one she says she deleted. Meta says it has fixed the prompting.
The Watch · Security desk
What happened
- At the start of September, Kalie Robins posted a video of her young daughter on Facebook, and Meta AI displayed a suggested question beneath it: "Who is the child passenger?"
- A second suggested question asked where Robins lives, and after she clicked it the assistant worked through old and recent posts before attempting to pinpoint her location.
- Meta said the feature had "missed the mark", said it fixed the issue that caused Meta AI to suggest questions about personal topics, and said the AI only surfaced posts the asker could already access.
Compiled by The WatchSomething wrong?How this is made
Why it matters
- exposure A family's exposure runs through relatives' accounts. The newborn photo came from the grandmother's Facebook, so a parent who deletes their own posts leaves the grandmother's posts in place.
- contradiction Meta's access defence and the deleted photo do not sit together as reported: either the deletion left a copy the assistant can still reach, or the index covers more than the visible account.
- constraint This falls outside patching and configuration. The material sits in consumer accounts belonging to staff and their families, so removal by the people who posted it is the only available control.
- capability The correlation took one click. It linked two children to names and birth dates, and an adult to past and current addresses, and she typed nothing to get it.
Robins did not ask Meta AI anything. The system put "Who is the child passenger?" under a video she had just posted, and clicking it returned separate information for each of her two children, including names and birth dates [2][3].
Meta's answer, given to The Verge, is about access. A spokesperson said the assistant only surfaced information drawn from posts the person asking could already access [12]. That accounts for the newborn photo, which Robins' mother had posted on Facebook years earlier [5]. It does not account for the second image, which Robins said had been deleted from her own account long ago, and Malwarebytes wrote that the explanation "doesn't seem to explain" that photo either [5][13].
The fix Meta described has a narrow scope. The company said the feature had "missed the mark" and that it had fixed the issue that caused Meta AI to suggest questions about personal topics [11]. In its statement it said, "The feature never should have prompted the individual with questions like that" [10]. The change is to what the assistant volunteers: a user who types the question is doing what Robins did after she clicked.
The second prompt was "Where does Kalie Robins live?" [6]. She clicked that one too. According to her account, the assistant went through old posts that hinted at where she had lived, then newer posts that connected her to her current home, and finished by trying to pinpoint her location [7]. "I didn't ask Facebook to build a profile of my family," Robins said [9].
Meta AI has been built into Facebook, Instagram, WhatsApp and Messenger since April 2024 [14]. From that launch to the September 2026 account, the feature had been in production about 29 months [21]. Malwarebytes reported in June last year that Meta AI users were publicly sharing their conversations, often without realising it [15], and that a bug reported the following month could have let people read other users' private Meta AI chats by guessing their IDs [16]. Late last year Meta began targeting people with ads based on their Meta AI conversations [17].
For the household, the remediation is deletion, and it does not stop at their own account. "I'm done. I'm removing any identifiable pictures and videos of our kids," Robins said [18]. She said she would ask her friends to do the same, because otherwise Facebook could still harvest her children's pictures from those accounts and use them in the profiles it builds [19].
What to watch
- Whether Meta addresses the deleted photo directly and says how long removed media stays retrievable by the assistant.
- Whether the suggestion fix covers all personal-topic prompts or only questions about minors, and whether typed queries return the same aggregation.
- Whether any data protection authority opens an inquiry into cross-account retrieval of minors' names and birth dates.