Google’s Prompt API
Once a model is available on your device, per the specification, any website you visit will be able to send prompts to that model without requesting permission to do so, then do whatever it wants with the responses. And again, Gemini Nano is on your device if you’re using Chrome, and it will be again if you remove it, unless you start tearing out wires in ways that the average user of the web can’t. So, in short: you now have an LLM running on your machine, and any website you visit can make use of it, and whatever processing resources it requires. Google — a company that has paid billions of dollars in settlements for lawsuits related to privacy violations and deceptive practices in data collection — has said not to worry about it.
Add another reason to avoid Google Chrome like the plague. If you value your privacy at all, I’d highly suggest never using Chrome, and if possible, remove it from your computer all together. It will provide another easy way to fingerprint you.