Privacy & AI

Your Data Is Their AI’s Lunch. Self-Hosting Is How You Take It Back.

Meta and Google have quietly turned your posts, photos, chats and inbox into fuel for artificial intelligence and advertising. Here’s what’s really happening, and the practical way out.

Remember when “free” apps made money by showing you ads? That deal has changed. Today, the biggest tech companies are in an arms race to build the most powerful AI models, and AI runs on one thing above all else: data. Enormous amounts of it. And the richest, most human data on earth is sitting in the apps you use every day.

Your vacation photos. Your group chats. Your calendar. Your client emails. Your kid’s birthday party album. To an AI company, that’s not your life. It’s training material and targeting signals.

Let’s look at what the two biggest players are actually doing, and then talk about a solution that puts you back in charge.

Meta: Facebook, Instagram and WhatsApp

Meta owns three of the most-used apps on the planet, and its AI strategy leans on all of them.

Facebook & Instagram

Public posts, photos, comments and captions from adult users are used to train Meta’s AI models. Meta has acknowledged public content going back as far as 2007 has been part of this. Making your posts private now stops future use, but doesn’t pull back what’s already been collected.

Meta AI chats → ads

Since December 16, 2025, what you say to Meta AI (by text or voice) feeds the system that picks your ads, posts, Reels and group suggestions. Ask it about hiking and you’ll see hiking ads. Users in the EU, UK and South Korea were excluded. Canadians were not, and there’s no opt-out short of not using Meta AI.

Instagram DMs

Instagram ended support for end-to-end encrypted direct messages on May 8, 2026, citing low usage and pointing people to WhatsApp instead. Without that encryption, Meta can technically access DM content, for example for moderation, safety checks or legal requests.

WhatsApp

The good news first: normal personal WhatsApp messages and calls are still end-to-end encrypted. The catch: anything you send to or tag @Meta AI leaves that protection, is processed on Meta’s servers, and may be used to improve its AI. If your WhatsApp is linked in Accounts Center, those AI chats can shape your Facebook and Instagram ads too.

Fair is fair: Meta says it excludes sensitive topics (religion, health, politics, sexual orientation, ethnicity, union membership) from ad targeting, and that it doesn’t train on private messages. Those are real limits. But they’re limits Meta sets, and Meta can change.

Google: Gmail, Calendar, Photos and Drive

Google’s situation is more nuanced, and it’s worth getting the facts right, because a lot of scary-but-wrong claims went viral in late 2025.

In November 2025, posts spread claiming Google had secretly opted every Gmail user into AI training through its “Smart features” setting. Google publicly denied it, saying it hadn’t changed anyone’s settings and does not use Gmail content to train its Gemini model. The security company that amplified the claim later corrected its article. A class-action lawsuit alleging Gemini had been switched on to scan Gmail, Chat and Meet without consent was filed in California, and Google has since won a ruling against it.

So is your Gmail safe from AI? It’s more complicated than yes or no:

Service What Google says The fine print
Gmail Inbox contents aren’t used to train Gemini. “Smart features” still have AI scan your mail to sort tabs, suggest replies and pull out events. Gemini can now read across your inbox if you connect it.
Calendar & Drive Workspace data isn’t used to train foundation models. Gemini’s “Personal Intelligence” can connect to Calendar, Drive, Docs, Keep and Tasks and build insights about you, your relationships and your world.
Photos Photos data is never used for ads, and isn’t used to train AI models outside of Photos. “Ask Photos” analyzes your whole library to answer questions. Connect Photos to Gemini and it’s handled under Gemini’s rules instead.
Gemini chats Your inbox and photo library aren’t the training set. Your prompts and Gemini’s answers can be used for training. A sample is read by human reviewers and can be kept up to three years, even after you delete your history (unless you turn “Keep Activity” off).

In other words: the email itself may not be training the model, but the conversation about your email can be. And the line between “AI helping you” and “AI learning from you” is drawn by Google, in policy pages most people never read.

The problem isn’t one bad setting. It’s that someone else owns the switch.

The real issue: you’re a tenant, not an owner

Every one of these changes arrived the same way: a notification, a policy update, a new toggle buried three menus deep. Sometimes there’s an opt-out. Sometimes it’s only available to Europeans. Sometimes there isn’t one at all.

That’s what happens when your digital life lives on someone else’s computer. You can delete an app, change a setting or file a complaint, but you can’t stop the landlord from rewriting the lease. And as AI gets more valuable, the pressure to use more of your data will only grow.

There is another way, and it’s older than social media itself.

Self-hosting: what it is and why it works

Self-hosting means running the services you depend on (email, cloud storage, calendar, photo backup, chat) on a server you control, instead of renting space on Big Tech’s platforms. That server can be a small box in your office or home, or a private server in a Canadian data centre that’s set up and managed for you.

BIG TECH CLOUD SELF-HOSTED You Their servers your data AI models Ad engine Rules change when they decide You Your server your data No one else 🔒 Rules change when you decide
With self-hosting, your data has one destination: you.

Here’s why it changes the game:

  • No one is mining it. There’s no ad engine and no AI training pipeline attached to your server. Your files are just your files.
  • No surprise policy changes. Nobody can email you a “we’re updating our terms” notice that quietly rewrites what happens to your photos.
  • Your data stays in Canada. You choose where the server sits, which matters for businesses with privacy obligations to their clients.
  • Encryption you control. Features don’t disappear because a company decided “not enough people used them.”
  • No lock-in. Self-hosted tools use open standards (IMAP, CalDAV, WebDAV), so your data moves wherever you want.
  • Predictable costs. One flat setup instead of a growing pile of per-user subscriptions that raise prices every year.

What replaces what

The best part: you don’t have to give up convenience. Mature, open-source tools now match the big apps feature for feature, with phone apps that sync just like you’re used to.

You use now Self-hosted alternative What you get
Google Drive & Docs Nextcloud (with Nextcloud Office) File sync on every device, shared folders, online document editing
Google Calendar & Contacts Nextcloud Calendar / Contacts Syncs natively with iPhone, Android, Outlook and Thunderbird
Google Photos Immich Automatic phone backup, face and object search, shared albums, all processed on your own hardware
Gmail Your own mail server (e.g. Mailcow) or a privacy-first business host Email on your own domain with no inbox scanning
WhatsApp / Messenger / IG DMs Signal (everyday), or Matrix / Nextcloud Talk (self-hosted) End-to-end encrypted messages, voice and video calls, with no ads and no AI mining
Gemini / Meta AI Local AI (e.g. Ollama with Open WebUI) An AI assistant that runs on your machine and never sends your prompts anywhere
Browser-saved passwords Vaultwarden (Bitwarden-compatible) A private password manager for the whole family or office

That last-but-one row is worth pausing on. You don’t have to give up AI to keep your privacy. Open-source AI models now run well on modest hardware, so you can summarize documents, draft emails and search your own files with an assistant that answers to you and no one else.

Our top picks: the alternatives we actually recommend

There are hundreds of privacy tools out there. These are the ones we’d set up for our own family, and the ones we install most often for clients. Some are fully self-hosted. A couple aren’t, but they’re built so the company can’t read your data, which gets you most of the way there with zero maintenance.

💬

Signal

Replaces WhatsApp, Messenger, IG DMs

The gold standard for private messaging. Every message, voice call, video call and group chat is end-to-end encrypted by default, with no option to turn it off. Signal is run by a non-profit foundation, has no ads, doesn’t sell data and is open source, so security experts can verify its claims. It even collects almost no metadata about who you talk to.

Getting started: Install Signal on your phone, register with your number, then turn on a username (Settings → Profile) and hide your phone number so people can reach you without it. Set a Signal PIN and enable Registration Lock to stop anyone hijacking your account. Add Signal Desktop for your computer, then move your family group chat over first. Once the people you talk to most are there, the rest follow.

📸

Immich

Replaces Google Photos & iCloud Photos

The closest thing to Google Photos you can run yourself, and it’s genuinely excellent. Immich backs up your phone’s camera roll automatically in the background, then gives you a timeline, map view, albums, shared family libraries, and AI-powered search (“beach,” “dog,” “Mom”) plus face recognition. The difference? All that AI runs on your server. Your photos never leave your home or office.

Getting started: Immich runs on a small home server, a NAS (Synology, QNAP, Unraid) or a mini PC using Docker. Install the Immich app on each family member’s phone, turn on background backup, and use Google Takeout to bring your existing Google Photos library across. Important: pair it with a proper backup (see below), because your server now holds your only copy of decades of memories.

☁️

Nextcloud

Replaces Google Drive, Docs, Calendar, Contacts

Your own private cloud. File sync across every computer and phone, shared folders, online document editing, calendars, contacts, tasks, notes and even video calls (Nextcloud Talk). It uses open standards, so it syncs natively with iPhone, Android, Outlook and Thunderbird. For a small business, it can replace a Google Workspace subscription for the whole team.

✉️

Proton Mail or your own mail server

Replaces Gmail

Email is the one service we usually don’t recommend running from a home server. Keeping messages out of spam folders takes constant care. Two good paths: Proton Mail, an encrypted, Swiss-based provider that can’t read your inbox and supports your own domain, or a professionally managed mail server (such as Mailcow) on a Canadian host. Either way, put your email on a domain you own so you can move it any time.

🔑

Vaultwarden

Replaces browser & Google password saving

A lightweight, self-hosted server that works with the official Bitwarden apps and browser extensions. Every password, credit card and secure note stays encrypted on your own server, and you can share logins safely with family or staff. (Prefer zero maintenance? Bitwarden’s own hosted service is a great choice too.)

🤖

Ollama + Open WebUI

Replaces Gemini, Meta AI, ChatGPT

Run a ChatGPT-style assistant entirely on your own hardware. Ollama downloads and runs open AI models; Open WebUI gives you a familiar chat window in the browser. Summarize documents, draft emails or brainstorm, and nothing you type is sent to any company, used for training or read by reviewers.

🛡️

Pi-hole or AdGuard Home

Blocks trackers network-wide

A tiny service that blocks ads and tracking domains for every device on your network, including smart TVs, phones and tablets that you can’t install an ad blocker on. It’s often the first self-hosted project people try, and the results are visible on day one.

🔐

WireGuard or Tailscale

Secure access from anywhere

How do you reach your home photos and files from the road without opening your network to the internet? A private VPN. WireGuard (or Tailscale, which is built on it and much easier to set up) lets your phone connect securely back to your server from anywhere, as if you were at home.

💾

Restic, Borg or Duplicati

Non-negotiable: backups

Self-hosting means you’re responsible for your data, so back it up. These tools make encrypted, automatic backups to an external drive and an off-site location (a second home, a relative’s house, or encrypted cloud storage like Backblaze B2). Because the backups are encrypted before they leave your server, the storage company can’t see what’s in them.

Honourable mentions

  • Jellyfin: your own Netflix-style media server for movies, shows and music you own.
  • Paperless-ngx: scans, OCRs and organizes receipts, bills and documents so you can search them, privately.
  • Home Assistant: runs smart-home devices locally, so your lights and cameras don’t report to the cloud.
  • Ente Photos: an end-to-end encrypted, open-source photo backup if you’d rather not run a server for Immich.
  • Brave or Firefox with DuckDuckGo or Brave Search: a privacy-respecting browser and search engine to replace Chrome and Google Search.

Let’s be honest about the trade-offs

Self-hosting isn’t magic, and anyone who says it’s effortless is selling something. Here’s the real picture:

✅ What you gain

  • Total ownership of your data
  • No AI training, no ad profiling
  • Data residency in Canada
  • No surprise policy or price changes
  • Unlimited users without per-seat fees

⚠️ What it takes

  • Someone has to apply security updates
  • Backups are your responsibility (do them!)
  • Email is the hardest part to run well, since deliverability takes expertise
  • Some upfront setup time and hardware cost
  • You lose a few Big Tech conveniences

For tech-savvy hobbyists, that’s part of the fun. For a busy family or a small business, the answer is managed self-hosting: you get the ownership and privacy, and a local IT team handles the updates, backups and monitoring.

How to start (without doing it all at once)

  1. Lock down what you already use. Turn off Gemini “Keep Activity,” review which apps are connected to Gemini’s Personal Intelligence, check Gmail’s smart feature settings, and avoid sharing anything personal with Meta AI. Make your Facebook and Instagram posts friends-only.
  2. Switch your chats to Signal. It’s free, takes five minutes, and needs no server. Start with your family or closest friends group.
  3. Start with photos. Photos are the most personal data you own and the easiest win. A self-hosted Immich server backs up your phone automatically, just like Google Photos.
  4. Move files, calendar and contacts. Nextcloud replaces Drive, Calendar and Contacts in one move.
  5. Get your own email domain. Even before you self-host mail, owning your domain (you@yourname.ca) means you can switch providers anytime without losing your address.
  6. Set up backups. Then test them. Follow the 3-2-1 rule: three copies, two different types of storage, one off-site.

Can self-hosting really save us all?

On its own, one person running a home server won’t change Big Tech’s business model. But every family photo library, every small-business inbox and every client file that moves off these platforms is data that can’t be harvested, profiled or trained on. Self-hosting breaks the assumption that convenience has to cost privacy, and when enough people opt out, companies feel it.

The internet was originally built to be decentralized: lots of people running their own pieces of it. Self-hosting is simply a return to that idea, with far better tools than we had twenty years ago.

Want your data back? We’ll set it up for you.

Razenet is a family-owned IT company in Red Deer, Alberta. We design, install and manage private, self-hosted email, file storage, calendars and photo backup for families and small businesses, so you get Big Tech convenience without Big Tech watching.

Contact Us

reach out and start a conversation!

This form is protected by reCAPTCHA.


Sources

  1. Meta announcement on using Meta AI interactions for ads and content personalization from Dec 16, 2025 (reported by Reuters, The Wall Street Journal, Tom’s Guide and others).
  2. Instagram Help Centre: end-to-end encrypted messaging no longer supported after May 8, 2026 (reported by 9to5Google, Newsweek).
  3. WhatsApp: “About using AI experiences available through WhatsApp.”
  4. Meta statements on training generative AI with public Facebook and Instagram content (EU, UK and global reporting, 2024–2026).
  5. Google / Gmail statement, Nov 21, 2025: “We do not use your Gmail content to train our Gemini AI model” (via The Verge, TechRadar).
  6. Google: “Gemini introduces Personal Intelligence” (Jan 2026) and the Gemini Apps Privacy Hub.
  7. Google Photos Help: “Gemini features in Photos privacy hub” (updated Feb 2026).
  8. Thele v. Google LLC, class action over Gemini Smart Features (filed Nov 11, 2025).

Policies change often. Facts are accurate as of November 2026. Always check the current privacy settings for each service.

Did you enjoy this post?