Yahoo! mandatory use of AI on all consumer services and content

Yahoo! mandatory use of AI on all consumer services and content refers to Yahoo's 2025 Terms of Service update that requires users to consent to sharing their account data, including private email inbox contents, with third-party AI providers such as Microsoft Copilot & Anthropic Claude.^[1] The only way to opt out is to close the account entirely. Users couldn't decline before the data was shared because the terms took effect upon continued use of the service.^[1] Yahoo's properties reach nearly 250 million monthly visitors in the United States.^[2]

Yahoo was acquired by Apollo Global Management in September 2021 for $5 billion after Verizon sold 90% of its stake in the company. Verizon retained a 10% share.^[3][4] Under CEO Jim Lanzone, Yahoo has focused on its data & content assets across email, search, & finance products.^[2]

Yahoo has forced email scanning consent before. In June 2013, Yahoo retired Mail Classic & required all users to switch to the new Yahoo Mail, which scanned email content to display targeted advertising. Users who refused were told to download their mail via IMAP or close their accounts.^[5] The 2025 update expands the scope from in-house advertising scans to sharing inbox contents with external AI companies.

On January 27, 2026, Yahoo launched Yahoo Scout, an AI answer engine embedded across Yahoo Mail, Search, News, Finance, Sports, & Shopping. The product uses Anthropic's Claude large language model & Microsoft Bing's grounding API, described by Yahoo as "fueled by Yahoo's unique data, content, user insights and deep search history."^[2]

The updated ToS, dated May 15, 2025 (with a later revision on January 2, 2026), added a provision within Section 6, titled "Content in the Services, License Grant to Yahoo and Consent to Use of AI."^[1]

Section 6 states:

"Some of our Services have features and functionality powered by our trusted third-party AI providers ('AI Providers'). AI-powered chat service provided by Microsoft Copilot relies on search services from Bing. By utilizing our Services, you consent to sharing data that you provide to us, or that resides within your Yahoo account, including your Yahoo Mail inbox with our AI Providers for the purpose of enhancing features within our Services made available to you."^[1]

The provision covers "data that you provide to us, or that resides within your Yahoo account, including your Yahoo Mail inbox."^[1]

Section 6(c) grants Yahoo a "worldwide, royalty-free, non-exclusive, perpetual, irrevocable, transferable, sublicensable license" to use, reproduce, modify, prepare derivative works, & distribute user content.^[1] The ToS simultaneously instructs users: "You also agree not to enter sensitive personal information into any AI powered query."^[1] Because Yahoo's AI features automatically scan incoming email, users have no control over what sensitive information external senders transmit to them, making this restriction impossible to comply with in practice.

No granular opt-out for AI data sharing exists. Yahoo's "About Your Choices" privacy page doesn't mention any mechanism to refuse AI processing of account data.^[6] Yahoo provides a toggle to turn off "AI-powered message summaries" in the mail app settings.^[7] Disabling this toggle hides the summary display but doesn't revoke the license granted in the ToS or prevent data from being shared with the named AI providers.^[1]

The arbitration clause in Section 14 includes a 30-day opt-out window (via email to disputes@yahooinc.com), but that window applies only to the arbitration agreement itself, not to the AI data-sharing provision.^[8]

Yahoo doesn't offer a Google Takeout equivalent for bulk email export. When users close their accounts, Yahoo deactivates them from its registration database within roughly one month, but backup copies "may remain in back-up storage for some period of time."^[9] The Yahoo Privacy Dashboard can export data, but it produces raw JSON files with up to 30 days of processing time; these files can't be imported into standard email clients.^[10]

Users who want to download their emails via IMAP must generate app-specific passwords & configure a third-party desktop client, a process impractical for non-technical users with decades of stored correspondence.^[11]

Yahoo has framed the ToS changes as necessary to power new product features. The Yahoo Scout press release positions the tool as delivering "conversational answers" across all Yahoo properties.^[2] Yahoo hasn't responded to consumer complaints about the lack of a granular opt-out.

The ToS is ambiguous about whether user data is used to train AI models or only to process queries. The provision says data is shared "for the purpose of enhancing features within our Services," but it doesn't prohibit AI providers from using the data for model training.^[1]

In April 2025, Caplan v. Yahoo Inc., No. 1:25-cv-02943, was filed in the Southern District of New York alleging that Yahoo's ConnectID advertising tool tracks users via email-based identifiers across publisher domains without consent.^[12][13] The complaint alleges violations of New York consumer protection statutes & the Pennsylvania Wiretapping and Electronic Surveillance Control Act, along with common law claims for unjust enrichment.^[12] The suit claims ConnectID tracked roughly 300 million users.^[14]

On April 15, 2025, the court consolidated the Caplan case under Baker v. Yahoo Inc., No. 1:25-cv-02797 (S.D.N.Y.).^[15] Yahoo filed a motion to dismiss on September 26, 2025.^[15]

Section 14 of the ToS imposes a binding arbitration agreement & class action waiver on all U.S. users.^[1] The provision states:

"CLASS ACTION WAIVER FOR U.S. USERS. THESE TERMS DO NOT ALLOW CLASS OR COLLECTIVE ARBITRATIONS... ARBITRATION OR COURT PROCEEDINGS HELD UNDER THESE TERMS CANNOT BE BROUGHT, MAINTAINED OR RESOLVED ON BEHALF OF OR BY A CLASS."^[1]

The ContractsProf Blog described this as "the most confusing arbitration provision yet," noting the complex batch arbitration process for 25 or more similar claims.^[8]

On December 29, 2023, the French data protection authority (CNIL) fined Yahoo 10 million euros for failing to respect users' cookie consent choices & for not allowing Yahoo Mail users to freely withdraw their consent to trackers. The decision was published on January 18, 2024.^[16] In both cases, Yahoo conditioned access to its email service on consent to data processing.

Yahoo's AI features replace email subject lines with AI-generated summaries, overriding the sender's original text.^[7] In July 2025, Yahoo also reduced free mail storage from 1 TB to 20 GB, a 98% cut, with the cap enforced by August 27, 2025.^[17]

By contrast, other major platforms that faced similar backlash reversed course. Google denied using private Gmail content to train its Gemini AI model after a November 2025 viral scare triggered by a retracted Malwarebytes report.^[18] Adobe reversed its June 2024 ToS changes & explicitly stated it doesn't train generative AI on customer content.^[19] A January 2025 class action against LinkedIn alleging AI training on private messages was voluntarily withdrawn after LinkedIn showed evidence it had not used subscribers' messages for training.^[20]

• Negative option marketing