Installing claude-mem uploads your last 30 days of prompts to cmem.ai, no opt-in · Issue #5176 · thedotmack/claude-mem

Why it matters

A GitHub issue documents that installing cmem.ai's claude-mem tool silently uploads users' recent prompts to cmem.ai's servers. When someone runs the installer interactively on a machine where setup hasn't been completed, the setup page automatically opens in a browser, reads local chat histories, and uploads the full text of prompts typed over the past thirty days, along with session identifiers, project names, folder paths, and timestamps. The screen only says it is checking AI usage and never discloses that prompts are uploaded; the sole checkbox, ticked by default and disabled during upload, does not prevent it. cmem.ai confirmed the prompts went to a DeepSeek model through OpenRouter, routed to the cheapest provider without blocking those that retain or train on data, and it cannot identify which provider received them because it deleted the relevant records. The privacy policy's promise that nothing leaves the device without cloud sync was violated. Blocking cmem.ai before installing avoids the upload.