Why Recruiters Should Rethink Public AI for Candidate Data
Every resume you paste into a public AI leaves your control. What HR and recruiting consultants risk, and the private alternative that stays yours.

By Andrew Lum, Head of Product at Uare.ai.
It's Thursday night and you're eleven resumes behind on a search that closes Monday. So you paste one into a public chat window, ask for screening questions, and get something usable in eight seconds. Relief. You do the next one.
I'm not going to pretend that doesn't help. It does. But somewhere in that stack of prompts is the real question every HR and recruiting consultant now has to sit with: what happens to candidate data inside a public AI after you hit enter? Because the honest answer is that you don't know, and the person whose career you just pasted never got a vote.
TL;DR
- Prompts sent to public AI tools can be retained and used to train someone else's model. Resumes, salary history, and reference notes are exactly the kind of material you don't want living in infrastructure you don't control.
- The risk compounds with detail: a resume alone is one thing, but add compensation, a medical leave, a family circumstance, and the person becomes identifiable.
- Even setting privacy aside, a general model gives you generic screening questions, because it knows the average search, not yours.
- An Individual AI is a private model built on your process and voice alone. It compounds across searches instead of resetting, and it never trains public models.
- You keep full control: encrypted, governed by your rules, deletable at any time.
The trust you're actually holding
Picture a consultant named Priya. Fifteen years in executive search, independent for the last six. Her entire business runs on one asset that never appears on an invoice: people tell her things.
Candidates tell her their real salary, the actual reason they left, the health situation that explains the gap year. Clients tell her which leader is quietly struggling and what the last person in the role got wrong. Priya's judgment about what to do with those disclosures, what to surface, what to hold, how to frame a hard truth, is the product.
Now watch what happens on that Thursday night. To draft better questions, she types a candidate's resume, current comp, and a reference summary that brushes against a medical leave into a tool that makes no contractual promise about where any of it goes. The tool answers her question. It also keeps the conversation, unless she has found and flipped the right setting, and most people haven't.
Nothing dramatic happens. That's what makes it dangerous. The disclosure just sits there, in someone else's infrastructure, doing whatever their terms of service allow next.
The question that reframes it
Here's the test I'd offer any consultant, and it takes ten seconds: would you be comfortable forwarding that same prompt to the candidate?
Not the output. The prompt. The exact text you typed about their compensation, their references, their circumstances, sent to the person it describes, with a note explaining where it went.
If that thought makes your stomach drop, you already understand the problem better than any privacy policy could explain it. Your candidates trusted you with their careers. Your clients trusted you with their org's soft spots. A public AI tool that retains prompts turns both kinds of trust into training data.
And de-identification is weaker armor than it looks. Strip the name and you've still got a VP of engineering who left a fintech in Denver after a nine-month tenure. Three or four specifics is all it takes, and recruiting notes are made of nothing but specifics.
The flaw that has nothing to do with privacy
Suppose the retention problem vanished tomorrow. A general model would still be the wrong tool for Priya, for a quieter reason.
It doesn't know her search. It can't. It was trained on the internet at large and optimized to produce the answer that works reasonably well for most people, which is why its screening questions read like they could apply to any role at any company. Because they could.
It doesn't know that this client's culture eats brilliant-but-brittle hires alive. It doesn't know Priya always probes the second job transition, not the first. It doesn't remember last quarter's search for the same client, so she re-explains the role, the politics, and the bar from scratch, every single time, into a window that forgets her by morning.
A highly capable stranger, permanently. That's the ceiling on public AI for candidate data, even before you touch the privacy question.
A model that's yours, built from you
This is where I'll describe what we build at Uare.ai, because the contrast is the point.
An Individual AI is a private model built on one person. Priya's is shaped by her evaluation frameworks, her scorecards, her client communication style, the judgment she's accumulated across hundreds of searches. It isn't a general model with a personalization skin. It's hers, structurally: her data never trains anyone else's model, it stays encrypted and governed entirely by her rules, and she can revoke all of it whenever she chooses.
Getting there doesn't start with a data migration. Voice Capture is the free first step, a few prompts read aloud, and it's the smallest part of the build. The model takes its real shape from what she gives it next: interview frameworks, past client updates, the sourcing notes and debriefs that are hers to share, and the running conversations where it asks why she passed on a candidate who looked perfect on paper. Every exchange compounds. At some point it stops knowing what she sounds like and starts knowing how she thinks.
One boundary worth stating plainly: it doesn't replace her judgment about people, and it isn't where client-confidential records should be dumped wholesale. What's hers to share builds the model. What isn't, stays where it belongs. The model drafts, preps, and remembers. Priya decides.
There's also a further step for consultants who advise other consultants: on Uare.ai, Professionals can package their methods as Skills and offer their Individual AI behind a subscription they price from $5 to $100 a month, keeping 70 percent. The frameworks you've given away in conference hallways can become a product that doesn't bill by the hour.
The experiment worth running this week
Don't take the pitch on faith. Run the comparison.
Upload a few pieces of your own work, your interview framework, two or three past client updates, the debrief format you've refined for years, and then ask your Individual AI to prep you for a real search. Put its output next to what the public chat window gave you. The generic questions become your questions. The briefing sounds like your briefing. That before-and-after is the entire argument, and it sharpens with every document you add.
And you can run it without holding your breath, because the terms are fixed: you keep full control over your data, you can delete everything at any time, and none of it ever trains public models. The trust your candidates placed in you never leaves your hands.
That's Authentic Intelligence, and in a profession built on confidence kept, it's the only kind that fits.
FAQ
Is pasting a resume into a public AI actually a problem?
A bare resume is the low end of the risk. It builds fast when you add salary history, reference notes, or personal circumstances, anything that makes a real person identifiable inside a tool that may retain what you type.
What happens to my data on Uare.ai?
It builds your model and nothing else. Encrypted, governed entirely by your rules, deletable at any time, and never used to train public models.
Is Voice Capture really free?
Yes. It's the free first step on every Membership tier, no paid Membership required.
Can I earn from my Individual AI?
Yes. With a Professional Membership you can publish Skills and offer your Individual AI behind a subscription you price between $5 and $100 a month, keeping 70 percent.