What your keyboard sends home

Most of this field guide is about what websites take from your visitors. This one steps off the website and onto the device, because the same extraction logic runs there too — and nowhere more intimately than the keyboard. A keyboard app occupies a uniquely privileged seat: by design, it sees every character you type, in every app, before that text goes anywhere else. That's not a flaw; it's how a keyboard works. The question is what it does with that view.

For the big, free, AI-powered keyboards, the answer is: it helps you, and it also tells the company things. Not necessarily your raw passwords streamed in real time — the reality is more mundane and more pervasive than that. What leaves is mostly the metadata of your typing, sent home to sharpen predictions and train models. Useful. Also revealing.

Read that middle row again: which app received each word, with timestamps, tied to your advertising ID. Even with no message content at all, that's enough to know you opened a dating app at 1am, your banking app on payday, a pharmacy app on Tuesday. The contents stay private and the pattern gives you away — the same lesson as the email guide, now riding on your thumbs.

The keyboard doesn't need to read your secrets to profit from them. It only needs to notice, with a timestamp, every door you typed your way through.

Not all keyboards are the same

Here's the fair and useful part — the differences are real and large, and you have genuine choices. Keyboards fall along a clear spectrum from "sends nothing" to "sends a lot," and you can simply move toward the quiet end.

This isn't malware — it's a default nobody chose

To keep this honest: the mainstream keyboards aren't keyloggers in the criminal sense, and the big companies aren't reading your texts for sport. SwiftKey's documentation is actually fairly transparent; Gboard does clever things to keep much processing on-device. The data mostly travels encrypted. The real issue isn't villainy — it's that your typing patterns end up on someone else's server where they can be breached, subpoenaed, policy-changed, or merged into the profile that follows you around. And almost nobody chose that on purpose; it came pre-installed and switched on.

(There's also a darker edge worth one sentence: because keyboards see everything, a genuinely malicious one is among the most dangerous things you can install — which is exactly why "where did this keyboard come from, and what does it send" is a question worth asking at all.)

Quiet your keyboard

You don't need to become a hobbyist to fix this — just to make a deliberate choice instead of inheriting a default:

1. Find your "share usage / help us improve" setting in your keyboard's options and turn it off. On the mainstream keyboards this alone cuts a lot of what's sent.
2. Check what permissions it has — a keyboard rarely needs contacts, location, or microphone unless you use voice typing. Deny what it doesn't need.
3. Delete learned words / typing history in the app's settings if you'd like to clear what it's already gathered.
4. Consider an open-source or offline keyboard for the quiet end of the spectrum — especially on the device where you type the most sensitive things.
5. Be wary of unknown keyboards entirely. If you didn't choose it on purpose from a maker you can name, it shouldn't be sitting between your fingers and everything you type.

Whatever you find, it isn't cause for alarm — it's just a seat you didn't know was occupied, now visible. The keyboard sees the most of any app you own. It's worth knowing, and worth choosing, who's sitting there.