Perplexity's "Incognito Mode" Exposed as Sham in Federal Privacy Lawsuit

A proposed class-action filed March 31, 2026 in San Francisco federal court by a Utah man ("John Doe") claims Perplexity AI embeds undetectable trackers that vacuum up entire user conversations—even when the user flips on the company’s "Incognito" switch. According to the complaint, the startup then pipes those supposedly private chats straight to Meta and Google for ad targeting, an arrangement the suit labels a "sham" privacy promise. Ars Technica reports the filing describes "enormous volumes of sensitive info" being shared, including medical, financial, and relationship details users believed were walled off.

Perplexity’s web and mobile apps quietly download hidden tracking scripts the moment a user opens a thread, the complaint says. Those scripts capture the full text of every prompt—yes, even the mortgage-panic question you typed at 2 a.m.—then ship it to Meta’s Conversions API and Google’s advertising systems before any answer appears. Bloomberg notes the trackers fire regardless of whether the user toggled "Incognito," which the suit argues violates California’s Invasion of Privacy Act and the state’s Unfair Competition Law.

The most incendiary claim is that Perplexity markets Incognito as a privacy shield while, per the suit, continuing to stream data to third parties. MediaPost quotes the filing: users were "fraudulently induced" into believing their chats were isolated on-device. If proven, this could torpedo a core product pitch that has helped the startup differentiate from Google Search.

Beyond damages, the case threatens the narrative that upstart search engines are privacy-friendly alternatives to Google. Perplexity has raised hundreds of millions pitching exactly that angle; a finding that it quietly monetizes user prompts would dent its brand and invite regulator scrutiny. The suit also ropes in Meta and Google as co-defendants, arguing they knowingly accepted ill-gotten data—raising the specter of broader discovery into how ad-tech pipelines treat AI-generated user signals.

As of April 3, the company has issued no public statement on the docket. That silence is conspicuous: Perplexity typically responds fast to controversy, including previous scraping allegations. Observers expect a motion to dismiss arguing that users consented via terms of service, but the Incognito claim may be harder to shake.

Judge Yvonne Gonzalez Rogers (who also oversees the Epic v. Google case) will first decide whether to certify a class potentially covering millions of users. Discovery could unearth internal emails on data-sharing deals, and any smoking-gun memo about Incognito would be catnip for regulators already probing AI privacy practices. A settlement isn’t unlikely: privacy suits often end with a patch to the product and a token payout, but the reputational dent may linger. Meanwhile, competitors like You.com and DuckDuckGo are already pushing "actually private" search as a wedge.