The Silent Download

Between April 20 and April 29, Google Chrome silently downloaded and installed Gemini Nano, a 4GB on-device language model, onto users' machines through its automatic update system. No consent dialog. No notification. No setting to prevent it. If you find and delete the file, Chrome re-downloads it on the next launch.¹

The file is called weights.bin. It lives in a directory called OptGuideOnDeviceModel. Forensic analysis on one machine showed the entire process took 14 minutes and 28 seconds on a profile with zero user interaction.¹

Chrome has over a billion users.

What It Does

Gemini Nano powers several Chrome features: "Help me write" in text fields, on-device scam detection, tab-group suggestions, smart paste, and page summaries. Some of these features are useful. None of them were requested by the user before the model landed on their disk.²

There is no Chrome setting to block Nano specifically. Disabling the component updater would also stop security patches. The only durable way to prevent re-download is a Windows Registry policy edit that most users don't know exists and shouldn't have to find.³

The Cost

Privacy researcher Alexander Hanff documented the installation and calculated the scale. At a conservative 3% deployment rate (100 million devices), the download generates an estimated 6,000 tonnes of CO2. At 30% (1 billion devices), it's 60,000 tonnes, equivalent to the annual emissions of 13,000 passenger vehicles.¹

Those figures exclude re-download cycles, inference energy, SSD wear, and future model updates.

For users on metered connections, 4GB can represent a significant portion of a monthly data allowance. In cloud development environments like GitHub Codespaces and GitPod, the installation breaks storage quotas. In regulated industries, unapproved software on endpoints creates compliance risk.²

The Legal Question

Hanff identifies three potential EU regulatory violations: Article 5(3) of the ePrivacy Directive (storing information on user devices without prior consent), Article 5(1) of the GDPR (processing without lawfulness, fairness, or transparency), and Article 25 of the GDPR (failure of data-protection-by-design). His argument: "The 4GB Gemini Nano weights file is information stored in the user's terminal equipment. The user did not consent."¹

The Pattern

We wrote about The Opt-Out Illusion in March: the ways companies make it technically possible but practically impossible to control what happens to your data. The Silent Download is the same pattern running in the other direction. That piece was about your data leaving without meaningful consent. This is about their software arriving without it.

Google could display a consent dialog before downloading, trigger the download only when users invoke an AI feature, or list installed models in settings with a persistent delete option. It chose not to do any of these things. The 4GB is already on your disk.