# Data retention, training use and deployment isolation (`account.data_privacy`)

Feedback Bench, coding agents, built 2026-10-19, window 2026-08-31 to 2026-10-18. Web page: https://feedbackbench.com/coding-agents/#/criterion/account.data_privacy

Area: [Account and support](https://feedbackbench.com/coding-agents/criteria/account.md)

**Definition.** Whether prompts and code are retained or used for training, and whether private or air-gapped deployment is available.

**Boundary.** Not this: see [Free tier and free model availability and limits](https://feedbackbench.com/coding-agents/criteria/billing.free_tier.md) for free-model availability itself.

Rated user-weeks, all agents: 486. Complaint share: 81%.

## The brief

Written by large language models from this page's numbers and the posts it quotes, then checked: every number in the text is in the build. Interpretation, not measurement.

No coding agent stands out at protecting users' data. Claude Code leads the ranked agents, but its score sits at the category norm, and its users complain more often than they praise. Few users rate this topic: it is the 56th most rated of 63 criteria. When they do, 81.5% of rated user-weeks are complaints. OpenCode comes last. Its users rate data protection 2.12 times as often as other users, and they write 27% of the category's complaints here. Cursor is the only agent that scores worse than the category norm.

### What separates the best from the rest

No agent ranks high and none ranks low. The four ranked agents sit close together. Even Claude Code, in first place, draws 119 complaints to 27 praise. Its users describe code used for training after they opted out, no zero-retention option, and personal data or secrets sent out in requests and commits. OpenCode users describe a different problem: free or bundled models that quietly keep prompts for training or send traffic to hosts in places users did not expect.

- **Ranks high**: no agent
- **Ranks low**: no agent

## How it breaks

Rule: A separate pass sorts complaints into failure modes. For each criterion with at least 30 complaining user-weeks, a large language model reads 150 complaint posts drawn at random and names 4 to 8 failure modes; a second large language model then puts every complaint post on that criterion in one mode, or in Other when it fits none. Modes are fixed once named, and new posts are sorted into them each week. A mode counts distinct user-weeks with a complaint in it, per agent; across agents, one user-week per agent. Modes do not change the labels or the Feedback Score. Examples: up to 3 posts per mode from different users, chosen and checked as receipts are.

The largest failure is code used for training after users opted out. It makes up 21% of complaining user-weeks and is spread across Claude Code, OpenAI Codex and OpenCode. Two failures come mostly from one agent. Undisclosed data collection by bundled third-party models is 78% OpenCode. Secrets and personal data leaking into outbound content are 63% Claude Code. Nearly half of the complaints about account access spreading across connected apps, 49%, come from OpenAI Codex.

397 complaining user-weeks.

| Failure mode | User-weeks | Posts | Agents (user-weeks) | Definition |
|---|---|---|---|---|
| User code used for training despite opt-out | 84 | 88 | Claude Code 29, OpenAI Codex 22, OpenCode 18, Google Antigravity 10, Cursor 3, GitHub Copilot 1, Pi 1 | Users' prompts, code or session history are used, or suspected of being used, for model training even though they opted out or pay for a plan: settings switch back on after updates, opt-out toggles are hidden or split across products, and feedback prompts send whole sessions with one click; general distrust of a vendor that names no specific training practice does not count. |
| No zero-retention or private deployment option | 75 | 78 | Claude Code 27, OpenCode 16, OpenAI Codex 11, Zed 11, Cursor 6, Google Antigravity 2, GitHub Copilot 1, Kiro 1 | The product requires sending code and sessions to the vendor's cloud and keeping them there, with no zero-data-retention mode, offline or air-gapped mode, regional hosting, or a way to see or export what is stored, so contractual, residency or enterprise security rules forbid its use; cases where an isolated deployment exists but the user did not configure it do not count. |
| Personal data and secrets leaked into outbound content | 43 | 46 | Claude Code 27, OpenAI Codex 5, OpenCode 4, Cursor 3, Google Antigravity 2, Devin 1, Pi 1 | The agent puts the user's email, identity or session IDs, or unredacted secrets and personal data, into provider requests, outgoing HTTP headers, commits or transcripts, for example when compaction skips redaction or environment variables get dumped; account takeover by outside attackers does not count. |
| Undisclosed data collection by bundled third-party models | 40 | 41 | OpenCode 31, OpenAI Codex 3, Cursor 2, Google Antigravity 1, Claude Code 1, Factory 1, Pi 1 | Free or bundled models inside the agent quietly keep prompts for training or send traffic to hosts in jurisdictions the user did not expect, and this only shows up through API errors, forced opt-in toggles or fine print, with no simple filter for zero-retention models only; the first-party vendor's own training policy belongs in the opt-out mode. |
| Unexplained background uploads and hidden telemetry | 38 | 39 | Claude Code 10, OpenAI Codex 10, OpenCode 7, Google Antigravity 5, Cursor 4, GitHub Copilot 1, Grok Build 1 | The agent or harness makes network connections or large uploads the user never asked for, including while idle or overnight, or turns on telemetry and tracking IDs with no notice or off switch; web searches and fetches the user requested do not count. |
| Connected-account access leaking across apps | 37 | 38 | OpenAI Codex 18, Claude Code 9, Cursor 4, GitHub Copilot 3, Amp 1, Kiro 1, OpenCode 1 | Permissions given to one app or account (email, calendar, documents folder, GitHub, plugins) silently reach the coding agent or a sibling app, with no way to limit access to a single tool or workspace, or a hidden shared folder appears; agents deleting or damaging files are out of scope. |
| Other users' data exposed in sessions | 18 | 19 | Claude Code 7, OpenCode 4, Cursor 3, Amp 2, Google Antigravity 1, Grok Build 1 | Sessions show content that seems to belong to other users, such as stranger chat text, someone else's personal details, or unpublished research ideas that look like they came from another user, which points to cross-tenant leakage; the user's own data reappearing in their own session does not count. |
| Other | 69 | 76 | OpenCode 25, Claude Code 14, OpenAI Codex 13, Cursor 9, Google Antigravity 5, Cline 1, GitHub Copilot 1, Kiro 1 | Complaints that fit none of the modes above. |

#### User code used for training despite opt-out

- OpenCode, 2026-10-13, r/opencodeCLI (Reddit): “absolutely agreed! personally i lost trust in the platform, but to be fair, i was a fool to trust the opt-out when i could have made it clear in the config.” [source](https://www.reddit.com/r/opencodeCLI/comments/1x4kkgg/security_opencode_does_not_ask_for_file/pgh04dq/)
- Google Antigravity, 2026-10-09, r/google_antigravity (Reddit): “you can turn off the telemetry. that's it. there isn't a lot of clarity on training on user data. i am planning to stop using antigravity for this reason. [[link]” [source](https://www.reddit.com/r/google_antigravity/comments/1r90ery/so_is_there_actually_a_clear_answer_to_how_data/pervnt2/)
- Claude Code, 2026-10-08, r/ClaudeCode (Reddit): “maybe they could stop using our data to train the model then? why can't i curse at claude, if i disabled the sharing of my data for training?” [source](https://www.reddit.com/r/ClaudeCode/comments/1x0ybl2/no_more_abusing_claude_from_nov_12th_onwards/peozxe4/)

#### No zero-retention or private deployment option

- OpenCode, 2026-10-17, r/opencodeCLI (Reddit): “considering how open they are about using ai to develop opencode itself, im not surprised this happened... personally im moving to deepseek harness to not have any more risks with opencode's centralized proxy issues since everything is locally hosted” [source](https://www.reddit.com/r/opencodeCLI/comments/1x8kxw2/time_to_move_2_security_issues_in_a_week/phdm8qy/)
- OpenCode, 2026-10-17, r/opencodeCLI (Reddit): “first of all why are they storing my openai keys in the db? why? it’s against their own privacy policy second if they can store api keys i am pretty sure these scammers are storing everything else too” [source](https://www.reddit.com/r/opencodeCLI/comments/1x8hlcv/opencode_hack_how_is_opencode_claiming_to_be_zdr/phcprly/)
- OpenCode, 2026-10-17, @opencode (X): “@kbsingh @wtogami @opencode whole problem is that "saved a key in opencode" is fucking ambiguous. can mean cli, can mean server. i'm just pissed my keys for non-opencode apis may have ended up on opencode servers without me knowing it. and i still don't know.” [source](https://twitter.com/1163567821747625986/status/2111602116045508673)

#### Undisclosed data collection by bundled third-party models

- Pi, 2026-10-08, r/PiCodingAgent (Reddit): “it is currently funneling your search queries to a 3rd party. i made a post on this. the maintainer has still not responded to my pr to stop.” [source](https://www.reddit.com/r/PiCodingAgent/comments/1wydpe0/now_that_everyone_is_making_harness_tierlists/pelmsuq/)
- OpenCode, 2026-09-30, @opencode (X): “@opencode @thdxr heads up: my @openai api key was recently compromised, and the only recent exposure point i can identify was testing some of the free models in opencode. might be worth auditing how third-party model providers access session context or environment variables. ‼️” [source](https://twitter.com/2217191/status/2105103910860140742)
- OpenCode, 2026-09-25, r/opencodeCLI (Reddit): “marketed as zdr policy but i absolutely don't believe it for a stealth model during free testing.” [source](https://www.reddit.com/r/opencodeCLI/comments/1wpyova/what_would_make_you_switch_your_default_opencode/pc041x7/)

#### Unexplained background uploads and hidden telemetry

- OpenAI Codex, 2026-09-28, X search: OpenAI Codex, Codex CLI, Codex app (X): “the new version of the codex cli was tracking all my processes, spawning git.exe, tmux.exe, and conhost.exe, i had to disable everything, finally, they removed it from the docs where it stated that it was optional [link] [link]. damn, they want even more damn data [link]” [source](https://twitter.com/1541421115016417280/status/2104592504343380461)
- OpenAI Codex, 2026-09-26, X search: OpenAI Codex, Codex CLI, Codex app (X): “@seconds_0 the only problem with codex cli for me is it can track loc it has accessed to. who knows what else they track?” [source](https://twitter.com/88011125/status/2103679403830161635)
- OpenCode, 2026-09-25, r/opencode (Reddit): “no not at all.. i inspected. all connections are to [opencode.ai]([link]) with huge amounts of data upload” [source](https://www.reddit.com/r/opencode/comments/1wpvj70/bun_is_eating_my_bandwidth_even_after_i_close/pbyqtxa/)

#### Connected-account access leaking across apps

- OpenAI Codex, 2026-10-10, X search: OpenAI Codex, Codex CLI, Codex app (X): “i think openai made a big mistake not making dots a separate app. today i discovered that, because i connect my gmail to dots, the codex app i use for work has the same access (and searches it at pretty random times!) [link]” [source](https://twitter.com/61344715/status/2109000518890885378)
- OpenAI Codex, 2026-09-30, X search: OpenAI Codex, Codex CLI, Codex app (X): “@thsottiaux i tested it: codex cli can access my google calendar via the same chatgpt account. please add server-enforced controls for all connected accounts (gmail, calendar, etc.): let me allow chatgpt/dot but block cli. my coding vm runs untrusted code. 🙏” [source](https://twitter.com/1609940334624276481/status/2105341189356732887)

#### Other users' data exposed in sessions

- Amp, 2026-09-29, @AmpCode (X): “@sqs @romainlanz @ampcode i get why it works that way, but honestly still feels weird from a privacy standpoint even if no one's looking, knowing they could makes me feel watched/spied. makes me think twice about using amp more, even though i'd like to but maybe it's just me 🤓” [source](https://twitter.com/697207221097275392/status/2105063286995558713)
- Amp, 2026-09-29, @AmpCode (X): “is that expected that i can view personal threads on @ampcode if i am a workspace admin? i though personal was... personal ? @sqs” [source](https://twitter.com/474153793/status/2105058589836480868)
- Claude Code, 2026-09-17, @ClaudeDevs (X): “@claudedevs i better be in the betta cause this something i been workin on and yall clearly be readin folks files.” [source](https://twitter.com/38337857/status/2100646886600241595)

#### Other

- OpenCode, 2026-10-17, r/opencode (Reddit): “my openai api key that was saved inside openai account for openai provider was used today. around $150 were spent on astra. i searched my mac - the key is not stored on it. it is in my opencode account only. how is that possible?” [source](https://www.reddit.com/r/opencode/comments/1x8734p/someone_used_my_openai_key_that_is_saved_in/)
- OpenCode, 2026-10-17, r/opencodeCLI (Reddit): “i had my deepseek api connected to opencode and haven't received jack shit in my inbox about this. luckily it wasn't touched but fuck opencode now. thank you for posting here anyway, i wouldn't have known until i got drained if it wasn't for this post.” [source](https://www.reddit.com/r/opencodeCLI/comments/1x8gp72/opencode_security_breach_rotate_your_keys/phd9llz/)

## Top requests

What users ask to add or change, most asked first. 214 user-weeks ask for something. Requests do not change the Feedback Score. Rule: A separate pass by a large language model reads every counted post and extracts what the user asks the agent or its vendor to add or change, with the criteria it maps to and a short normalised wording; it does not touch the labels or the Feedback Score. A large language model groups the wordings within each criterion (the first criterion the request maps to) into themes, and a second pass merges themes that ask for the same change under different criteria; a merged theme sits under the criterion most of its requests map to, and code counts it once. A theme counts distinct user-weeks that ask for it, per agent; across agents, one user-week per agent. Themes asked in fewer than 2 user-weeks, and requests that share no theme, are not shown. Examples: up to 3 posts per theme from different users, without slurs: whole posts of 60 to 450 characters with at least 8 words beyond handles and links, posts of at most 280 characters first, then the newest.

| Rank | Request | User-weeks | Posts | Agents (user-weeks) |
|---|---|---|---|---|
| 1 | Opt-out of training on user data | 19 | 20 | Google Antigravity 9, OpenAI Codex 5, Claude Code 2, OpenCode 2, Cursor 1 |
| 2 | Local-only mode without cloud uploads | 15 | 15 | Zed 5, OpenAI Codex 4, Claude Code 3, Google Antigravity 1, GitHub Copilot 1, Cursor 1 |
| 3 | Zero data retention option | 13 | 13 | OpenCode 7, Cursor 3, Claude Code 1, Cline 1, OpenAI Codex 1 |
| 4 | Air-gapped, on-prem or self-hosted deployment | 11 | 11 | Zed 3, Claude Code 2, Factory 2, Google Antigravity 1, GitHub Copilot 1, Cursor 1, OpenCode 1 |
| 5 | Block agent access to secrets | 11 | 11 | Claude Code 5, Cursor 2, Devin 2, Google Antigravity 1, OpenAI Codex 1 |
| 6 | Clear disclosure of training data use | 10 | 12 | OpenCode 5, Google Antigravity 2, OpenAI Codex 2, Cline 1 |
| 7 | Full export of account data and work | 9 | 9 | Claude Code 4, Cursor 3, Google Antigravity 1, OpenAI Codex 1 |
| 8 | Telemetry disclosure and opt-out | 9 | 9 | OpenCode 3, Google Antigravity 2, Claude Code 2, OpenAI Codex 2 |
| 9 | Audit logs and egress visibility for agent actions | 8 | 8 | Google Antigravity 3, Claude Code 2, Cursor 2, OpenCode 1 |
| 10 | EU data residency and hosting | 8 | 8 | OpenAI Codex 3, OpenCode 2, Claude Code 1, GitHub Copilot 1, Pi 1 |
| 11 | Avoid routing data through China | 6 | 6 | OpenCode 5, Google Antigravity 1 |
| 12 | Opt-in session link attribution in commits | 6 | 6 | Claude Code 5, Amp 1 |

### 1. Opt-out of training on user data

- Claude Code, 2026-10-08, r/ClaudeCode (Reddit): “maybe they could stop using our data to train the model then? why can't i curse at claude, if i disabled the sharing of my data for training?” [source](https://www.reddit.com/r/ClaudeCode/comments/1x0ybl2/no_more_abusing_claude_from_nov_12th_onwards/peozxe4/)
- Google Antigravity, 2026-09-27, @antigravity (X): “@antigravity you should give an option to opt out while setting up antigravity itself. this is a dark pattern where people will just agree and later either forget to opt-out or forget about it after trying to dig through the settings to find it! [link]” [source](https://twitter.com/1013749216387256322/status/2104104816423453001)
- OpenCode, 2026-09-26, r/opencode (Reddit): “for people who don't want meta to use there input and output request to train there models + when i use muse i feel it is kinda dump” [source](https://www.reddit.com/r/opencode/comments/1wq74d5/deepseek_v41_flash_is_permanent/pc9rd8d/)

### 2. Local-only mode without cloud uploads

- Claude Code, 2026-10-06, r/ClaudeAI (Reddit): “they better hope they don't force people to send their files to the anthropic cloud for claude code. are they trying to kill all corporate business or just assuming everyone corporate is using api?” [source](https://www.reddit.com/r/ClaudeAI/comments/1wxs6hj/local_cowork_is_gone_tomorrow_moving_to_claude/pe7ozo8/)
- Claude Code, 2026-10-06, r/ClaudeAI (Reddit): “the main downside for me is losing the local-only option. for bigger or sensitive projects, keeping files and history local just feels safer. claude code helps, but it’s still not the same.” [source](https://www.reddit.com/r/ClaudeAI/comments/1wxiysh/updated_claude_storagememory_map_whats_local/pe56bs9/)
- Cursor, 2026-10-06, @cursor_ai (X): “as more and more code is written by ai to begin with, why does @cursor_ai @openai @anthropicai and others need to be sending up anything from your codebase? it's for your ideas. not a fan. they charge premium prices (enterprise) to guarantee you they're not stealing your ideas.” [source](https://twitter.com/1281321681479491585/status/2107473657094144158)

### 3. Zero data retention option

- OpenCode, 2026-10-09, @opencode (X): “@opencode opencode should have a simple flag to turn off model tagt will retain my data. right now i can turn off all free but this will be nice. openrouter does this quite well.” [source](https://twitter.com/901881049726164992/status/2108390097091694939)
- OpenCode, 2026-10-01, r/opencodeCLI (Reddit): “thanks for this, will definitely add it to my plugins list! would also like to say that i love your command code provider plugin for opencode. if i may ask, is there plans to further develop the zdr feature on that beyond the `cmd_zdr` environment variable passthrough?” [source](https://www.reddit.com/r/opencodeCLI/comments/1wv4obz/opencode_v2_finally_has_a_status_line_and_its/pd8uw0h/)
- Cline, 2026-09-27, r/CLine (Reddit): “please include whether it’s zdr or not. what’s with the limit because you are routing the request to vercel ai free pinary” [source](https://www.reddit.com/r/CLine/comments/1wqkucr/pixel_canary_new_stealth_model_is_now_free_in/pcce0up/)

### 4. Air-gapped, on-prem or self-hosted deployment

- Claude Code, 2026-10-13, r/ClaudeCode (Reddit): “will there be self hosted servers as an option? with plugins / mods support would be great!” [source](https://www.reddit.com/r/ClaudeCode/comments/1x4tuqy/13_weeks_of_vibe_coding_my_mmorpg_with_claude/pgiumds/)
- GitHub Copilot, 2026-10-08, r/LocalLLaMA (Reddit): “my large org has been rolling out "copilot basic chat" for a year and a half. they keep inviting me to a "how to use copilot" training.. it's so sad. hello, you need on prem enterprise compute like yesterday! things will have to get really bad before that ever happens.” [source](https://www.reddit.com/r/LocalLLaMA/comments/1x0n4pt/last_week_some_of_south_koreas_biggest_banks_were/pemvihy/)
- Zed, 2026-10-01, r/ZedEditor (Reddit): “sooner or later someone will open source it but i also assume the zed team will eventually make a on premise option. i’m in the same boat.” [source](https://www.reddit.com/r/ZedEditor/comments/1wv1r0e/delta_without_sending_the_code_online/pd80deh/)

### 5. Block agent access to secrets

- Google Antigravity, 2026-10-14, @antigravity (X): “@antigravity antigravity always puts my real env on readme.md, always” [source](https://twitter.com/1593616943122370560/status/2110302743571448248)
- Claude Code, 2026-10-12, r/ClaudeCode (Reddit): “this is a real problem. i’ve had claude code pull in .env stuff more than once without realizing it until later. a local filter that actually withholds the content instead of just hoping deny rules catch everything feels necessary” [source](https://www.reddit.com/r/ClaudeCode/comments/1x4a6kg/claude_code_read_my_env_and_sent_the_api_key_to/pfi2sxt/)
- Cursor, 2026-09-19, @cursor_ai (X): “why does cursor always upload secretly? @cursor_ai what is this [link]” [source](https://twitter.com/2346447672/status/2101305382312595933)

### 6. Clear disclosure of training data use

- OpenCode, 2026-10-13, r/opencodeCLI (Reddit): “it would be good if they define what the benefit from sharing actually is.” [source](https://www.reddit.com/r/opencodeCLI/comments/1x4fcee/will_wonder_be_free_or_paid_as_theres_no/pgi4nmw/)
- OpenCode, 2026-09-17, @opencode (X): “@opencode how are you measuring the no training claim in practice? a clear audit trail would help teams trust a free tool with real code.” [source](https://twitter.com/2095778877037477890/status/2100472630260248751)
- OpenCode, 2026-09-16, r/opencode (Reddit): “i've always wondered, if the "use my data for training" option is turned off in chatgpt, but i use oauth to access within opencode, will my data be sent to opencode or openai for training, or not? or what's the best way to be sure?” [source](https://www.reddit.com/r/opencode/comments/1wi052o/who_am_i_sending_my_information_to/)

### 7. Full export of account data and work

- Claude Code, 2026-10-17, @ClaudeDevs (X): “@claudedevs @claudedevs i paid $125 for claude max but keep getting locked out, disrupting my work and income. please help restore access. if i’m ineligible, please let me export my chats and work and disconnect my accounts so i can move to another ai. thank you.” [source](https://twitter.com/1875619622755459072/status/2111521030376243228)
- Claude Code, 2026-10-01, r/ClaudeCode (Reddit): “yea i understand vpn is the problem. i am simply concerned about getting my conversation history at least. my personal data should be mine” [source](https://www.reddit.com/r/ClaudeCode/comments/1wutrb1/account_suspended_due_to_suspicious_signals/pd6433k/)
- Claude Code, 2026-10-01, @ClaudeDevs (X): “@claudeai @claudedevs @anthropicai @claudeai @claudedevs fix your shitty service or let me download the yrs of work ive done with claude and i swear it you wouldn't see me on claude anymore ill delete and clear from my pc and mobile” [source](https://twitter.com/1995135234673983488/status/2105575748891279447)

### 8. Telemetry disclosure and opt-out

- OpenAI Codex, 2026-10-11, X search: OpenAI Codex, Codex CLI, Codex app (X): “with default settings, qwen code's telemetry included my prompt, the files it read, and memories from other sessions. codex exported file contents in tool output. claude code put my email on every metric. what three coding agents send over otel: [link]” [source](https://twitter.com/2093098559134404608/status/2109307482900201814)
- OpenCode, 2026-09-23, r/PiCodingAgent (Reddit): “the only issue with oh my pi vs opencode is that they don't allow you to turn off telemetry. i prefer privacy over fanciness.” [source](https://www.reddit.com/r/PiCodingAgent/comments/1uaydrr/what_do_you_guys_think_about_oh_my_pi/pbj7zgn/)
- Google Antigravity, 2026-09-07, r/google_antigravity (Reddit): “i expect transparency rather than sketchy lies and hiding behind the small text in a product i'm paying for.” [source](https://www.reddit.com/r/google_antigravity/comments/1wa6rcj/im_agy_clis_biggest_fanboy_but_i_have_to_quit_it/p8fyp3x/)

### 9. Audit logs and egress visibility for agent actions

- OpenCode, 2026-09-30, @opencode (X): “@opencode @thdxr heads up: my @openai api key was recently compromised, and the only recent exposure point i can identify was testing some of the free models in opencode. might be worth auditing how third-party model providers access session context or environment variables. ‼️” [source](https://twitter.com/2217191/status/2105103910860140742)
- Claude Code, 2026-09-17, @ClaudeDevs (X): “@claudedevs credentials and observability are where the demo turns into an operations problem. every agent run should leave a trace a human can inspect, especially when it touches production data.” [source](https://twitter.com/1395092615830278144/status/2100584475956563979)
- Google Antigravity, 2026-09-16, @antigravity (X): “@antigravity good trade-off: the network access closed by default reduces the blast radius, but the permission model will be as important as the sandbox. for real teams, will there be an audit log/export and reproducible profiles to review which tool each agent executed?” [source](https://twitter.com/93014855/status/2100121555204280393)

### 10. EU data residency and hosting

- OpenAI Codex, 2026-10-01, r/codex (Reddit): “he's telling us to abuse our dot as much as possible instead of using codex (rip eu users who require data regulation)” [source](https://www.reddit.com/r/codex/comments/1wv3dvu/october_1_2026_the_day_that_spontaneous_resets/pd8chh9/)
- OpenCode, 2026-09-16, @opencode (X): “@completeskeptic @thdxr @opencode @teknium @mitsuhiko @completeskeptic when are you gonna settle your service on a european server so i dont have to worry about privacy of my users of my app?” [source](https://twitter.com/2088242983053230080/status/2100308378920587309)
- Pi, 2026-09-16, @pidotdev (X): “@pidotdev thanks, the docs confused me with this part: "radius does not currently guarantee a specific processing location..." i just had a look , it seems like i'm unable to find it. (eu routing and zdr would be huge for us )” [source](https://twitter.com/1742954584908193792/status/2100247851515158600)

### 11. Avoid routing data through China

- Google Antigravity, 2026-10-06, r/google_antigravity (Reddit): “i suggest leaving us an old model for that if someone doesn't want his source code to be uploaded to china u/sounddr” [source](https://www.reddit.com/r/google_antigravity/comments/1wz9h2e/argon_is_coming_and_safety_constraints_are_gonna/pe9n3sw/)
- OpenCode, 2026-09-26, @opencode (X): “@opencode can you make it available outside china? my employer doesn't allow routing requests to china.” [source](https://twitter.com/1138368631618899968/status/2103817327267791184)
- OpenCode, 2026-09-20, r/codex (Reddit): “the only downside is that the only way to use it is by using servers in china. even through opencode you have to toggle the agree to have all inputs spied on by ccp toggle. i would love to use it otherwise.” [source](https://www.reddit.com/r/codex/comments/1wl1e7p/stop_begging_for_resets_chin_up_as_paid_customers/paves94/)

### 12. Opt-in session link attribution in commits

- Amp, 2026-09-22, @AmpCode (X): “@ampcode - for the public urls generated for each orb (running a web process/etc) - is there anyway to restrict them to just people in your workspace?” [source](https://twitter.com/15023/status/2102510669723820433)
- Claude Code, 2026-09-19, @ClaudeDevs (X): “@claudedevs need a way to disable it linking my claude chat session in public prs. what a terrible feature.” [source](https://twitter.com/15781023/status/2101241678145393059)
- Claude Code, 2026-09-04, r/ClaudeCode (Reddit): “the session link sharing feels like a massive security risk. there’s no good reason for those to be there.” [source](https://www.reddit.com/r/ClaudeCode/comments/1w6yw16/claude_code_v21259_forces_coauthoredby/p7sc18o/)

## Every agent

| Agent | Overall rank | Reading | Customer love | 95% interval | n | Praise | Complaint |
|---|---|---|---|---|---|---|---|
| [Claude Code](https://feedbackbench.com/coding-agents/agents/claude-code.md) | 1 | 1st of 4 | 0.502 | 0.466–0.546 | 146 | 27 | 119 |
| [Cursor](https://feedbackbench.com/coding-agents/agents/cursor.md) | 7 | 2nd of 4 | 0.479 | 0.464–0.496 | 38 | 4 | 34 |
| [OpenAI Codex](https://feedbackbench.com/coding-agents/agents/codex.md) | 10 | 3rd of 4 | 0.479 | 0.453–0.509 | 96 | 16 | 80 |
| [OpenCode](https://feedbackbench.com/coding-agents/agents/opencode.md) | 3 | 4th of 4 | 0.477 | 0.447–0.514 | 125 | 20 | 105 |
| [Google Antigravity](https://feedbackbench.com/coding-agents/agents/antigravity.md) | 14 | Too few posts | – | – | 27 | 1 | 26 |
| [GitHub Copilot](https://feedbackbench.com/coding-agents/agents/copilot.md) | 9 | Too few posts | – | – | 14 | 7 | 7 |
| [Zed](https://feedbackbench.com/coding-agents/agents/zed.md) | 8 | Too few posts | – | – | 12 | 1 | 11 |
| [Pi](https://feedbackbench.com/coding-agents/agents/pi.md) | 4 | Too few posts | – | – | 9 | 6 | 3 |
| [Kiro](https://feedbackbench.com/coding-agents/agents/kiro.md) | 13 | Too few posts | – | – | 6 | 3 | 3 |
| [Devin](https://feedbackbench.com/coding-agents/agents/devin.md) | 2 | Too few posts | – | – | 4 | 3 | 1 |
| [Amp](https://feedbackbench.com/coding-agents/agents/amp.md) | 5 | Too few posts | – | – | 4 | 1 | 3 |
| [Factory](https://feedbackbench.com/coding-agents/agents/factory.md) | 6 | Too few posts | – | – | 2 | 1 | 1 |
| [Grok Build](https://feedbackbench.com/coding-agents/agents/grok-build.md) | 16 | Too few posts | – | – | 2 | 0 | 2 |
| [Cline](https://feedbackbench.com/coding-agents/agents/cline.md) | 11 | Too few posts | – | – | 1 | 0 | 1 |
| [Conductor](https://feedbackbench.com/coding-agents/agents/conductor.md) | 12 | Too few posts | – | – | 0 | 0 | 0 |
| [Warp](https://feedbackbench.com/coding-agents/agents/warp.md) | 15 | Too few posts | – | – | 0 | 0 | 0 |
| [Augment Code](https://feedbackbench.com/coding-agents/agents/augment.md) | 17 | Too few posts | – | – | 0 | 0 | 0 |

## Posts

Receipts rule: Up to 5 praise and 5 complaint posts per area and 3 per criterion. Each is a whole post of 60 to 450 characters (700 for areas) with at least 8 words beyond handles and links, that judges the criterion, whose labels are all praise or all complaint, and that contains no slur. Posts that touch the fewest criteria come first, then posts of at most 280 characters, then the newest. A second large language model reads the first 3 candidates per slot and keeps a post only if it clearly praises, or clearly complains about, the agent on that criterion. Links and personal details removed by the source show as marks such as [link].

### Claude Code

- Praise, 2026-09-29, r/ClaudeAI (Reddit): “switch to using claude code. anything you can do in cowork can be done in code just as well and those stay local (at least for now).” [source](https://www.reddit.com/r/ClaudeAI/comments/1wtjezc/coworks_only_on_this_computer_option_is_removed/pcuynku/)
- Praise, 2026-09-24, @ClaudeDevs (X): “@claudedevs love this! running threads locally means way more privacy and faster iteration. great for sensitive projects — thanks anthropic! 🚀” [source](https://twitter.com/1864863623358877696/status/2102957004952314246)
- Praise, 2026-09-24, @ClaudeDevs (X): “@claudedevs honestly the bigger deal than people realize. customer addresses and pricing never leaving my machine means i skip the whole 'where's our data' conversation. local-first just wins trust by default.” [source](https://twitter.com/2061489365067689988/status/2103114840206180412)
- Complaint, 2026-10-08, r/ClaudeCode (Reddit): “maybe they could stop using our data to train the model then? why can't i curse at claude, if i disabled the sharing of my data for training?” [source](https://www.reddit.com/r/ClaudeCode/comments/1x0ybl2/no_more_abusing_claude_from_nov_12th_onwards/peozxe4/)
- Complaint, 2026-10-05, r/ClaudeCode (Reddit): “never used the desktop app. with more and more things in the app moving to cloud, including your chat history, memory, and working files being uploaded, i choose cli over the extra ux of a gui.” [source](https://www.reddit.com/r/ClaudeCode/comments/1wy9mju/how_many_of_you_still_use_claude_code_from/pe2i6ue/)

### Cursor

- Praise, 2026-09-05, @cursor_ai (X): “@cursor_ai cloud agents on my own pools is the control i've wanted. data boundary anxiety was blocking me more than model quality.” [source](https://twitter.com/2091157523155849217/status/2096327004392149115)
- Praise, 2026-09-04, @cursor_ai (X): “@cursor_ai the agent loop stayed in cursor. the credentials finally stay in your vpc.” [source](https://twitter.com/1610522467264565249/status/2095906460140183864)

### OpenAI Codex

- Praise, 2026-09-19, X search: OpenAI Codex, Codex CLI, Codex app (X): “@presidentlin i did an amateur privacy audit of codex cli because of these very fears and in preliminary investigations it passed the test. [link]” [source](https://twitter.com/1641924936699879426/status/2101194975568654425)
- Complaint, 2026-10-17, X search: OpenAI Codex, Codex CLI, Codex app (X): “@rvtond nope, this is purely personal. openai codex subs do not have zdr. do not use this if you care about zdr. only use for oss stuff 😎” [source](https://twitter.com/14961859/status/2111389399342797280)
- Complaint, 2026-10-10, X search: OpenAI Codex, Codex CLI, Codex app (X): “i think openai made a big mistake not making dots a separate app. today i discovered that, because i connect my gmail to dots, the codex app i use for work has the same access (and searches it at pretty random times!) [link]” [source](https://twitter.com/61344715/status/2109000518890885378)

### OpenCode

- Praise, 2026-10-13, @opencode (X): “@opencode zero retention makes testing local hooks way cleaner” [source](https://twitter.com/350714759/status/2110072820378263844)
- Praise, 2026-09-17, r/opencode (Reddit): “mostly using opencode for zdr though so it still have its place” [source](https://www.reddit.com/r/opencode/comments/1wigkse/bait_and_switch_is_really_bad_deepseek_if_i_had/pab18e6/)
- Praise, 2026-10-02, r/opencode (Reddit): “thanks for pointing to the zdr and credit card issues. only opencode discloses zdr info per model while other providers like commandcode goat allow you to pass the zdr flag, but do not disclose how much it will cost then. i had the zdr flag activated on provider level, but i changed it so that only the supported model/provider combos get it.” [source](https://www.reddit.com/r/opencode/comments/1wklyr8/opencode_go_alternatives/pddl48u/)
- Complaint, 2026-10-17, r/opencodeCLI (Reddit): “first of all why are they storing my openai keys in the db? why? it’s against their own privacy policy second if they can store api keys i am pretty sure these scammers are storing everything else too” [source](https://www.reddit.com/r/opencodeCLI/comments/1x8hlcv/opencode_hack_how_is_opencode_claiming_to_be_zdr/phcprly/)

### Google Antigravity

- Praise, 2026-09-30, @antigravity (X): “i appreciate you @google for unticking the data use box by default in @antigravity [link]” [source](https://twitter.com/2079329580654153728/status/2105411061511852428)
- Complaint, 2026-10-09, r/google_antigravity (Reddit): “you can turn off the telemetry. that's it. there isn't a lot of clarity on training on user data. i am planning to stop using antigravity for this reason. [[link]” [source](https://www.reddit.com/r/google_antigravity/comments/1r90ery/so_is_there_actually_a_clear_answer_to_how_data/pervnt2/)
- Complaint, 2026-09-27, @antigravity (X): “@antigravity you should give an option to opt out while setting up antigravity itself. this is a dark pattern where people will just agree and later either forget to opt-out or forget about it after trying to dig through the settings to find it! [link]” [source](https://twitter.com/1013749216387256322/status/2104104816423453001)
- Complaint, 2026-09-23, r/google_antigravity (Reddit): “oh yeah, and all those files/"prompts" are shared with google, which you've permitted to use said files for model training. and you have no way to opt out.” [source](https://www.reddit.com/r/google_antigravity/comments/1wnfcoo/has_antigravity_started_aggressively_scanning/pbh2a2k/)

### GitHub Copilot

- Praise, 2026-10-09, r/ClaudeAI (Reddit): “claude models are available via copilot harness for corporate america. this was how the bank i work at gave us access. when using this i can see that it has a symbol for enterprises data protection - my team works with material non public information for listed companies [link]” [source](https://www.reddit.com/r/ClaudeAI/comments/1x1hyow/how_did_you_convince_your_company_to_adopt/petl993/)
- Praise, 2026-09-16, r/vibecoding (Reddit): “nobody mentions copilot. 10$/month, you get claude and gpt models in the cli, and you can turn training off in the settings. i run it as the cheap seat next to my claude max, it does the implementation tasks fine and i keep max for planning and review.” [source](https://www.reddit.com/r/vibecoding/comments/1whc03f/openai_and_anthropic_have_amazing_models_but/pa5jyql/)
- Complaint, 2026-09-02, r/ChatGPTCoding (Reddit): “copilot is not just a proxy it uses prompt compression and refinement in several ways including things like llama-lingua2 etc. this helps reduce the ten sent but also affects the output. but like another person said, its trash and no guarantees of sustained service or safety from sudden hikes, get banned for no reason (happened to com sci professor). needless to say, they will steal your code more than any other outfit.” [source](https://www.reddit.com/r/ChatGPTCoding/comments/1w4lm3b/claude_code_vs_github_copilot_token_burn/p7avg1a/)

### Zed

- Complaint, 2026-09-25, r/ZedEditor (Reddit): “it looks like it sends your source code and chat history to zed's servers so it was immediately shot down by security at my company.” [source](https://www.reddit.com/r/ZedEditor/comments/1wq03mv/has_anyone_tried_delta/pc0hxb5/)
- Complaint, 2026-09-17, r/ZedEditor (Reddit): “it is not public, but have to share with zed servers. but it is still a issue in some industries.” [source](https://www.reddit.com/r/ZedEditor/comments/1whydrw/delta_in_public_beta/paaw9r6/)
- Complaint, 2026-09-17, r/ZedEditor (Reddit): “i work in cybersec and i’m not allowed to share any code:( i really wish i can use delta in local first mode without any collaboration features” [source](https://www.reddit.com/r/ZedEditor/comments/1whydrw/delta_in_public_beta/pabzacj/)

### Pi

- Praise, 2026-10-10, @pidotdev (X): “@mavam @pidotdev @badlogicgames @mitsuhiko i made this for me and my spouse utilizing fully pi durable and google pixel features. it is incredible powerful how much stuff you can make for yourself without locking to some cloud providers giving away your data. [link]” [source](https://twitter.com/2101610075894771712/status/2108866244199747898)
- Praise, 2026-10-10, @pidotdev (X): “oss pi ios wrapper. best harness on your iphone. i can’t stop using it. it’s coding for me, wrote an extension for homeassistant, etc appstore coming once apple approves. mit, collects no data, go make it yours! [link] @badlogicgames @pidotdev @earendilworks” [source](https://twitter.com/47647890/status/2108901696055427407)
- Praise, 2026-09-29, @pidotdev (X): “@mrkaran_ @pidotdev pointing it at an internal gateway is the good part. your diffs stay on your own infra.” [source](https://twitter.com/14187476/status/2104979202374291588)
- Complaint, 2026-10-08, r/PiCodingAgent (Reddit): “it is currently funneling your search queries to a 3rd party. i made a post on this. the maintainer has still not responded to my pr to stop.” [source](https://www.reddit.com/r/PiCodingAgent/comments/1wydpe0/now_that_everyone_is_making_harness_tierlists/pelmsuq/)

### Kiro

- Praise, 2026-10-08, r/kiroIDE (Reddit): “agreed. and i had to do an extensive write-up on it's data privacy ... and they had our bases covered.” [source](https://www.reddit.com/r/kiroIDE/comments/1x0lq4k/do_you_use_kiro_in_your_companys_project/pemwtw6/)
- Complaint, 2026-09-26, @kirodotdev (X): “nobody told me amazon made kiro crew, an openclaw agent clone. when i installed it, it copied all of my hermes openclaw and other agent skills and settings! wtf? @kirodotdev [link]” [source](https://twitter.com/7215722/status/2103726832617222463)

### Devin

- Praise, 2026-09-29, @cognition (X): “@itscynnamoroll @cognition @devindesktop @devinai first, they don't train on my data. second, it's just free, bro.” [source](https://twitter.com/1825243355501973504/status/2104785476334862521)

### Amp

- Complaint, 2026-09-29, @AmpCode (X): “is that expected that i can view personal threads on @ampcode if i am a workspace admin? i though personal was... personal ? @sqs” [source](https://twitter.com/474153793/status/2105058589836480868)
- Complaint, 2026-09-29, @AmpCode (X): “@sqs @romainlanz @ampcode i get why it works that way, but honestly still feels weird from a privacy standpoint even if no one's looking, knowing they could makes me feel watched/spied. makes me think twice about using amp more, even though i'd like to but maybe it's just me 🤓” [source](https://twitter.com/697207221097275392/status/2105063286995558713)

### Grok Build

- Complaint, 2026-10-01, r/cursor (Reddit): “grok is dodgy as. grok build uploaded my entire website server including all customer data payment info etc to somewhere else that wasn’t my file system. i noticed this was happening and then i saw that it was an actual thing - elon musk uploading everyone’s data to his own github and stealing everyone’s data even though they opted out i was on a business plan and he still did it” [source](https://www.reddit.com/r/cursor/comments/1wur8i7/composer_wiped_out_my_whole_drive/pdb0ftq/)