Google Chrome has been silently downloading a 4GB AI model called Gemini Nano onto users’ devices without asking for permission first. This file, named weights.bin, is tucked away deep inside Chrome’s user profile folder. It powers on-device AI features like “Help me write” and scam detection.
Users won’t find any checkbox in Chrome Settings to “download a 4GB AI model” because such an option simply doesn’t exist. The environmental impact of pushing a 4GB file to hundreds of millions of devices is huge by any reasonable standard.
Given Chrome’s global reach, the climate cost for one model download is somewhere between 6,000 and 60,000 tonnes of CO2 equivalent emissions. This is roughly the same as the yearly output of a small wind farm or the emissions from thousands of passenger cars every single year.
In many parts of the world, a 4GB mobile data plan is a whole month’s allowance, yet Chrome uses that up in one unrequested download. When users try to turn off the AI tools by deleting the weights.bin file, Chrome sees this as a temporary error. It then re-downloads the entire 4GB package the next time the browser is eligible.
The only ways to make the deletion permanent involve turning off AI features through chrome://flags or using special corporate policy tools that typical home users don’t have. Even a brand-new Chrome profile that received no input from a human still contained the full 4GB model within 15 minutes of being created. The browser downloaded the file while it was just sitting idle, waiting for a five-minute timer to run out on a third-party website.
The ePrivacy Directive clearly states that storing information on a user’s device without their prior, informed, and clear consent is forbidden. Chrome works perfectly fine without a 4GB AI model on the device, so no “strictly necessary” exception applies here. The GDPR requires transparency and fairness when handling personal data, but users were never told about this download at all.
The most visible AI feature in Chrome’s address bar, labeled “AI Mode,” doesn’t even use the on-device model. Those searches go straight to Google’s servers instead of being processed locally on the user’s device. This makes the 4GB installation a pure cost placed on users, with no privacy benefit in return.
Google has not published any analysis of how this affects people in areas where internet access is metered and limited. Also, regulators still need to decide whether global tech companies are exempt from laws that have been in place since 2002.
