PSA: Anyone with a link can view your Granola notes by default
Back to Tutorials
techTutorialintermediate

PSA: Anyone with a link can view your Granola notes by default

April 2, 202611 views4 min read

Learn how to secure your AI-powered note-taking environment by managing privacy settings and protecting your notes from unauthorized access.

Introduction

In this tutorial, you'll learn how to secure your AI-powered note-taking environment by understanding and managing privacy settings in apps like Granola. We'll walk through the process of checking, configuring, and protecting your digital notes from unauthorized access, focusing on the critical privacy controls that many users overlook. This tutorial is particularly relevant for anyone using AI-powered note-taking applications that default to shared access.

Prerequisites

  • Basic understanding of digital privacy concepts
  • Access to an AI note-taking application (Granola or similar)
  • Basic knowledge of account management and settings navigation
  • Understanding of what constitutes sensitive information

Step-by-Step Instructions

1. Identify Your Current Privacy Settings

The first step in securing your notes is to understand your app's default behavior. In Granola's case, notes are set to "private by default" but are still accessible to anyone with the link. This is a common pitfall in many AI applications.

Why this matters: Understanding the default state helps you identify what needs to be changed to protect your data.

# Example of checking privacy status via API (if available)
GET /api/v1/user/settings

2. Navigate to Privacy Controls

Open your note-taking application and locate the privacy settings section. This is typically found in your account settings or preferences menu.

Why this matters: Privacy controls are often buried in secondary menus, making them easy to miss during initial setup.

Look for options like:

  • "Note visibility"
  • "Share settings"
  • "Access permissions"
  • "AI training consent"

3. Restrict Public Access

Change your default note sharing settings to prevent public access. Set notes to be accessible only by you or specific collaborators.

Why this matters: The default "anyone with link" access creates a security vulnerability that can expose sensitive information.

# Sample configuration change
{
  "default_note_visibility": "private",
  "allow_public_access": false,
  "require_login_for_access": true
}

4. Opt Out of AI Training

Many AI note-taking apps use your content for training their models. Locate the AI training consent option and ensure you've opted out.

Why this matters: Your notes may contain proprietary or sensitive information that you don't want used to train AI systems.

Look for settings like:

  • "Use my notes for AI training"
  • "Allow data usage for research"
  • "Consent to model training"

5. Implement Strong Authentication

Ensure your account uses strong authentication methods. Enable two-factor authentication (2FA) to add an extra layer of security.

Why this matters: Even if someone gets a link to your notes, they still can't access them without proper authentication.

# Sample 2FA setup process
POST /api/v1/auth/2fa/enable
{
  "method": "sms",
  "phone_number": "+1234567890"
}

6. Regular Security Audits

Periodically review your privacy settings and note access permissions. Create a routine to check these settings monthly.

Why this matters: App updates or changes in default settings can reset your privacy controls without notice.

Key items to audit:

  • Current sharing links
  • Collaborator access levels
  • AI training consent status
  • Public access permissions

7. Create a Security Checklist

Develop a personal checklist of privacy settings to verify. This helps ensure you don't miss critical security measures.

Why this matters: A checklist prevents you from overlooking important privacy controls that can be easily missed.

# Sample security checklist
const securityChecklist = [
  "Verify note visibility is set to private",
  "Confirm AI training consent is opted out",
  "Check 2FA is enabled",
  "Review active sharing links",
  "Verify collaborator permissions"
];

Summary

This tutorial demonstrated how to secure your AI-powered note-taking environment by identifying default privacy vulnerabilities, adjusting access controls, and implementing additional security measures. The key takeaway is that default settings often prioritize usability over security, leaving users vulnerable to unauthorized access. By following these steps, you can ensure your notes remain private and that your data isn't used for AI training without your explicit consent. Remember that digital privacy is an ongoing process that requires regular attention and updates to your security practices.

Source: The Verge AI

Related Articles