There's a phrase floating around small offices across the Tri-Cities right now:
"It's free, it's fast. I'll just paste the client file in and ask it to summarize."
It sounds harmless. It is not.
This week's AI Myth Monday is about the most common and most expensive mistake we see business owners make: uploading client files into random AI tools without knowing where that data goes.
What actually happens when you paste a client document
When you drop a contract, an intake form, a tax document, or a client email into a free AI chatbot, you are doing one of three things. Most people do not know which one.
- Sending the data to a company you have no contract with. Their terms of service may allow them to store, review, or train on your input.
- Sending the data through a free tier that uses your content to improve their model. Most consumer free plans default to this.
- Sending the data through a paid business plan that does not train on your content but still stores it for a set period.
Only the third option is acceptable for most professional work. The first two are how breaches, ethics complaints, and uncomfortable news stories start.
A scenario we have seen play out
A solo attorney is preparing a response to opposing counsel. They are tired. They open a free AI tool, paste in the full demand letter, including the client's name, the case number, and damaging admissions, and ask it to "draft a polite rebuttal."
The draft comes back great. They send it out. They never think about the original paste again.
The problem is not the draft. The problem is that the client's information has now left the firm's control, and nobody is tracking where it went.
This is not hypothetical. The pattern repeats across law firms, medical practices, accounting offices, and small businesses every day.
What you should not paste into a free AI tool
If you handle any of the following, keep it out of consumer-grade free chatbots:
- Client names tied to legal matters
- Medical or health information
- Financial account numbers, tax IDs, or Social Security numbers
- Sealed or confidential documents
- Anything covered by HIPAA, attorney-client privilege, or a signed NDA
- Internal HR matters, performance reviews, or salary information
- Customer lists and pricing details
This is not about being paranoid. It is about being practical.
What to do instead
You do not have to give up on AI. You have to use it the right way.
- Use a paid business plan, not a free consumer tier. Paid tiers usually disable training on your data by default.
- Strip identifying details before pasting. Replace names with "Client A," dates with "Date 1," and amounts with placeholders. The AI can still help with structure and language.
- Choose AI tools built around your workflow, with proper data handling, instead of whatever free tool went viral last week.
- Keep a human reviewer in the loop. Human-reviewed output is the difference between AI that saves you time and AI that creates new problems.
- Ask before you paste. If you are not sure whether something is safe to drop into a tool, that is exactly the kind of question worth asking a consultant before it becomes a regret.
The Tri-Cities AI Lab take
AI should save time. It should reduce repetitive work. It should make your day easier.
It should not put your clients, your license, or your reputation at risk.
The free tool is rarely free. You are paying with your data, and sometimes with your clients' data. The fix is not to avoid AI. It is to use AI that is private and practical, built around your workflow, and human-reviewed before anything leaves your office.
If you are not sure whether the AI tool you are using meets that bar, that is the kind of question we help answer.
AI Myth Monday is a weekly series from Tri-Cities AI Lab. Each Monday we take one common myth about AI and break it down in plain language for business owners in Kingsport, Johnson City, Bristol, and across the region.
Ready to put AI to work in your business?