The crowded market for text-based personal AI assistants is getting a privacy lesson. Ollie, a San Diego startup building a family-focused assistant that manages calendars, meals, bills, and appointments over text, announced it has achieved SOC 2 compliance — a move CEO Bill Lennon frames as existential, not cosmetic. For a mainstream consumer AI handling schedules, groceries, and eventually household budgets, independent verification of data controls matters more than a flashy feature list.
Lennon pulls no punches about the competitive landscape. “We’re not sharing your data with anyone,” he told TechCrunch, stressing that Ollie’s subscription model exists precisely so the company never needs to monetize user information. The contrast with rivals is stark. Instinct, the AI assistant that raised $350 million at a $2.5 billion valuation before launching, faced backlash over terms granting it a “perpetual and irrevocable” license to use customer materials for AI training. Ollie has raised a modest $7.5 million seed round, mostly from Khosla Ventures, but is betting trust wins where hype doesn’t.
Ollie’s approach to security is deliberately inconvenient in places. The assistant never asks for usernames or passwords. When it needs to log into a website on a user’s behalf, it runs its own cloud browser and sends the user a link to a remote session. Payments work the same way. Lennon conceded this creates friction — users must log in repeatedly — but said the company is exploring “hard tokenization” to balance convenience with trust down the line. His fintech background, including selling neobank startup Groundwork in 2021, likely informs that roadmap.
Whether consumers actually want AI help managing household logistics remains an open question. Lennon declined to share user or subscriber numbers, though he claimed retention curves match leading AI subscriptions. The systems themselves still stumble: Instinct botched hotel pricing in an early test, and Ollie went dark during a text provider outage in another. In a category where everyone promises convenience, Ollie’s bet is that proving it won’t exploit your data is the real differentiator — even if that means asking users to type a password one more time.
