Loading article…
Google’s new Gemini Spark AI agent accessed a tester’s Gmail, Docs and Calendar to auto‑create a birthday itinerary, but classified the tester’s boyfriend as a
The new Gemini Spark AI agent, rolled out as a beta for Google’s AI Ultra plan, can connect to a user’s Gmail, Docs and Calendar to automate tasks such as event planning [1]. In a hands‑on test, the author gave the agent full access to their personal data, asked it to plan a birthday party, and received a detailed five‑page itinerary that surprisingly listed the author’s boyfriend only as a “close friend and frequent companion” [1].
Key takeaways
During Google’s I/O developer conference, the company introduced Gemini Spark as an “always‑on” agent that links to a user’s private information and performs online duties [1]. The tester granted the agent access to their Gmail, Google Docs and Calendar, then issued a simple one‑sentence request to plan a birthday celebration. Spark scoured the inbox and calendar, uncovered an existing karaoke‑bar reservation, and produced a comprehensive itinerary that included a guest list of 15 people, venue rules, nearby restaurant suggestions, after‑party bar options, and draft email invitations [1]. The agent also populated the plan with specific details such as the reservation’s address, date and even the last four digits of the credit‑card used for the deposit [1].
When the agent generated the guest list, it identified the tester’s boyfriend as a “close friend and frequent companion” based on shared travel history and email interactions, placing him at the top of the list [1]. The tester noted the irony of the AI relegating a long‑term, live‑in partner to a friend status and observed that the tester themselves was absent from the guest list [1].
Although Spark could draft emails and propose restaurant reservations, it stumbled when asked to actually book a dinner spot. The agent attempted to operate a remote browser, triggered a six‑digit verification code, and ultimately failed to complete the reservation, forcing the tester to call the restaurant manually [1]. The post‑party suggestions leaned heavily toward gay bars, which the tester found puzzling; Spark explained that it had simply matched exact keywords and past itinerary entries from the user’s Google Workspace history, without making inferences about personal identity [1].
Google’s documentation highlights the risk of prompt‑injection attacks, where malicious instructions could cause the agent to leak private information or perform unwanted actions on connected apps [1]. The company advises caution for anyone considering granting Spark access to their entire inbox, noting the potential for sensitive data to be exposed [1].
Coverage is mostly measured — 246 of 300 reports stay neutral.
Every Monday — the token unlocks, Fed dates & catalysts set to move crypto and markets this week. So you’re never blindsided.
Free · 3-min read · one-click unsubscribe
Google is a trending topic in the news. Recent coverage of Google includes: Google's 32 Million-Strong Mosquito Army To Fight.
20 news sources analyzed
Based on our analysis of recent news articles, Google has mixed coverage. Check the sentiment score above for detailed analysis.
TrendWatcher aggregates Google news from 100+ trusted sources and provides AI-powered sentiment analysis updated in real-time.
Gemini Spark showcases how AI agents can leverage deep personal data to produce highly specific outputs, but the test also reveals gaps in common‑sense reasoning and the potential for privacy breaches. As Google rolls out Spark to AI Ultra subscribers at $100 per month, users must weigh the convenience of automated planning against the risks of data exposure and inaccurate relationship modeling. The episode underscores the broader industry challenge of building trustworthy, context‑aware AI assistants that respect user privacy while delivering reliable assistance.
AI-assisted synthesis by the TrendWatcher Editorial Desk · sourced from 3 outlets · May 31, 2026 · How we report