Google's Gmail and Photos ad shift only works if it's truly opt-in

What do you actually buy when you hand your photos and email to a cloud service? Storage, search, maybe some convenience. What you don't expect to buy is a role as raw material for someone else's ad machine. That is why this week's story about Google, Gmail and Google Photos has hit a nerve.

What changed, as far as we can tell

According to The Verge, Google's updated privacy policy could mean you start seeing targeted ads based on your personal data if you use personalized AI features. A Reddit thread summarizing the change says apps you connect to Search can help personalize ads, that an ad test has begun, and that you can disconnect those apps. That is a community summary, so treat the details with caution. Android Authority describes it as a privacy policy exception to use Gmail and Photos data for ads.

We don't have the full policy text, and we don't know how broad the exception is. So what follows is opinion built on a gap between what Google has said and what it now appears to be doing.

The old promise was unusually clear

Google's privacy policy says it doesn't show personalized ads based on your content from Drive, Gmail or Google Photos, unless you choose to make data from these services available to other Google services. Its safety page says much the same: the company doesn't use data from those products for ads unless you choose otherwise. The German version of that page is blunter, saying content stored in Drive, Gmail and Photos is never used for advertising.

Notice the structure of that promise. The default is "no," and the exception is yours to grant. If the new arrangement is truly a choice you make by connecting those services to a personalized AI feature, Google could argue it is keeping its word. In our view, that argument is only as good as the clarity of the choice.

Consent that hides inside a feature isn't consent

Here is our concern. Linking your inbox to an AI assistant because you want help finding a flight confirmation is one decision. Having that link also feed ad targeting is a different decision with different stakes. Bundling them turns a convenience toggle into an advertising permission. A user can reasonably say yes to the first and no to the second.

Nobody should have to read a policy update to learn the difference. The design we'd defend is simple: a separate, plainly worded switch, off by default, that says "let Google use insights from my email and photos to choose ads." Not a buried opt-out, and not a setting you discover after the first ad appears.

Google has a stake in being careful. Ads are the engine of the business: Basic Thinking noted in 2021 that over 90 percent of Google's revenue came from advertising. When a company's incentives lean that heavily one way, a "trust us, you can turn it off" design deserves skepticism.

Where we'd draw the line

We don't think every use of personal data is sinister. Google already personalizes ads from searches and browsing, and the user-facing controls for that are mature. Search queries are signals you produce for the open web. Your inbox and photo library are private archives you deposited under a different understanding. Mixing the two categories is the real crossing, even if the technical mechanism is narrow.

The practical advice is simple. Check your Google Account's Data & privacy settings, as Android Authority points you to. Review which apps and services are connected to Search and the AI features, and disconnect what you don't need. And don't assume that turning off ad personalization elsewhere covers this.

Our verdict: Google can make this change without betraying anyone, but only if "opt-in" means a deliberate, separate, reversible choice. Anything murkier breaks the quiet contract of cloud storage: you keep the files, we keep our hands off them. If Google wants to rewrite that contract, it should ask out loud.