On July 1, 2021, Google made a clear promise in its privacy policy: "We don't show you personalized ads based on your content from Drive, Gmail, or Photos." Five years later, in what appears to be one of the most significant changes to its free-services monetization model, Google updated that clause and now includes an exception that allows the use of this data for advertising purposes — provided the user has explicitly opted to connect those services to other Google tools. The change took effect on October 16, 2026, and has been reported by multiple outlets, including The Verge, 9to5Google, Android Authority, and Chrome Geek.
The original wording, unchanged since 2021, now ends with "unless you choose to make data from these services available to other Google services that support personalized ads." That phrase, seemingly technical, actually opens a wide door: by enabling Personal Intelligence — a feature launched in January 2026 that allows Gemini and Search to access your emails, photos, and documents to generate more relevant answers — the user inadvertently grants Google permission to use insights derived from those services to personalize ads.
What changes in practice is subtle but significant. Google maintains its promise not to directly scan your Gmail content for advertising purposes — in other words, the company won't scan your emails looking for products to promote. However, the data processed by Personal Intelligence can generate "insights" (such as a trip destination, the type of establishment where you shop, or the context of a family event) that will be used to calibrate ads displayed in Search, AI Mode, and Discover. It's this distinction between "reading your email" and "using inferences derived from your email" that allows Google to keep the letter of its promise while changing its spirit.
The change coincides directly with a test already underway: ads in AI Mode. When AI Mode was launched, the experience was completely ad-free. In March 2026, Google stated that users with Personal Intelligence enabled would not see ads. Now, it has confirmed it is testing the introduction of advertising in that context, specifically for the group that connects external apps (Gmail, Drive, Photos) to Search via Personal Intelligence. The policy change dates from October 16 — fifteen days after the original statement that there would be no ads — suggesting the test began in parallel and the policy was updated to reflect reality.
What the user can and cannot expect is equally important to map out. The updated policy specifies that advertisers do not have direct access to your connected services, that sensitive categories (race, sexual orientation, health) remain excluded from personalized ads, and that disconnecting apps in Search's personalization settings disables this flow. What remains unclear, however, is how Google defines "derived insights" — whether the inference "user traveled to Europe in summer" is sufficient, or whether something more specific is needed to consider that personal data "powered" an ad. And, curiously, while it's possible to disconnect Gmail or Photos from Search, Google itself admits this doesn't erase what was already saved in activity history, which may have implications for those expecting the "forget" feature to be as robust as the "don't remember" feature.
From a historical perspective, this hasn't been the first time Google modified this clause. In March 2024, the policy had been updated to include "activity across Google services" as a basis for ad personalization, replacing a previously tighter phrasing. The October 2026 change goes further by transforming an absolute promise into a conditional one — which is a conceptually distinct move, even if technically within the rules.
The question that remains is whether this change reflects a natural evolution of Google's business model — where increasingly integrated services naturally share personalization signals — or a calculated erosion of a promise that served as the company's primary shield against surveillance-digital criticism. The fact that the change is opt-in and appears in privacy policy text rather than being announced as a product feature at an event perhaps says more about the strategy than any press release would.
Sources: The Verge, 9to5Google, Android Authority
✓ Independent sources cross-checked and verified before publishing
