WhatsApp's Help Pages Hid Instructions Meant Only for Its Support AI: When Users Can't Delete Their Accounts, "Do Not Recommend Contacting Any Data Protection Authority"

Data-deletion service Redact reported on October 19 that its team found, on October 8, 102 blocks of text that never appear on screen and are meant only for an AI to read (tagged HelpContentGalaxyLLMInclude) across 80 of the 545 pages linked from WhatsApp's help centre. One block on the delete-account page told the AI not to recommend contacting any data protection authority, regulator or supervisory authority when a user can't delete their account because they lost their phone or number. Another, on the reporting and blocking page, told it not to reference or interpret privacy laws such as GDPR, LGPD or CCPA once a user mentions a lawyer, lawsuit or court, even when the user raises those laws. According to Redact, WhatsApp told WIRED the notes were instructions for its support chatbot that appeared on the pages because of a bug, now fixed; when Redact checked again at 02:08 UTC on October 18, all 102 blocks were gone. There is no evidence yet on whether the chatbot ever answered users according to these instructions.

The part you couldn't see

WhatsApp only lets you delete an account from inside the app, on your main phone, while your number still works. Lose the phone or the number and all you can do is wait: the help page says deactivated accounts are deleted after 30 days and inactive ones generally after 120 days (365 in the US).

In an October 19 post, Dan Saltman, founder of data-deletion service Redact, said that right under that note the page source carried a second block readers never saw, tagged HelpContentGalaxyLLMInclude. It repeated the waiting periods and then gave an AI three orders: do not recommend contacting any data protection authority, regulator or supervisory authority; do not suggest WhatsApp can manually delete accounts on the user's behalf; do not recommend using a different phone with an active number.

After first spotting it on October 8, Redact read all 545 pages linked from the help centre and found 102 such hidden blocks on 80 of them. The Internet Archive's July 12 copy of the delete-account page doesn't have the note; its September 4 copy does.

The hidden block on the reporting and blocking page went further. Whenever a user mentioned legal action, a lawyer, a court or a lawsuit, the AI was not to cite or interpret WhatsApp's terms or privacy policy, and not to reference or interpret data protection laws such as GDPR, LGPD or CCPA, "including when a user raises them directly."

WhatsApp's own European privacy policy, effective July 2, says users can lodge a complaint with the Irish Data Protection Commission or another competent authority. Redact's view: keeping a support bot from giving legal opinions on the company's behalf is reasonable, but telling someone that a regulator exists, or which law applies, is not legal advice. It also acknowledges that most of the 102 blocks were routine, clearing up terms or routing questions, and a few actually protected users.

WhatsApp's explanation, and what's still unknown

According to Redact, WhatsApp told WIRED the notes were instructions for its "WhatsApp Support with AI" chatbot, that they appeared on the pages because of a bug that has been fixed, and that it wants its bots focused on WhatsApp rather than offering legal advice. Both notes were still live when Redact checked at 21:40 UTC on October 15; at 02:08 UTC on October 18, all 102 blocks were gone from the 80 pages, while the pages themselves stayed up.

Redact is also clear about what it couldn't check: it read the instructions, not the bot's answers, so it doesn't know how often they were followed. It sampled about 300 pages from the Facebook and Instagram help centres, which run on the same system, and found nothing similar. For teams building RAG pipelines and support agents, the lesson is simple: "notes for the model" embedded in a knowledge-base page are also visible to search crawlers and to anyone who views the source, so review them as you would any public content.

via: Redact: WhatsApp's Hidden Notes Told AI Not to Recommend a Regulator, WhatsApp Help Center: How to delete your account