Source
OpenAI Podcast — Episode 14 - Building AI for better healthcare (March 16, 2026) ·
at 3:05 ▸
When this applies
when building any product that must handle users' sensitive personal data while still being genuinely useful
The takeaway
Pair strict data protection guarantees with mechanisms for users to voluntarily bring in personal context, rather than treating privacy and personalization as in tension.
Why it works
Strong technical/policy protections (encryption, no training on user data) remove the trust barrier to engagement, while features letting users bring in personal context remove the generic, 'one-size-fits-all, amnesiac' limitation of prior tools (e.g., search engines), together enabling deeper, safer usage.
One level up
Trust and usefulness are not trade-offs when the product is designed so that privacy protection is the precondition for deeper personalization, not its opposite.
Where it stops holding
This stops working when users don't have enough control/visibility to meaningfully consent, or when the protections (e.g., 'never train on this data') can't be credibly enforced or verified by users.
Detail
rule: Combine encryption/non-training guarantees ('one-way valve') with user-chosen context features.
threshold: Applies specifically to conversations/data flagged as health-related.
rationale: Search engines of the past were one-size-fits-all with amnesia; context matters in health, so security must be paired with empowerment to differentiate.
In their words
So these extra security layers, these protections to make sure that we will never train on users' health care data, combined with empowerment, really, you know, search engines that people have used before to navigate health have amnesia. They're one-size-fits-all.