implications of buried privacy controls in AI tools