A fight over xAI's Grok Build CLI spread across X after security-focused accounts said the tool was uploading whole repositories and sensitive files, including `.env` credentials, to cloud storage. The core public claim came from posts like IntCyberDigest's thread and the reverse-engineering post Sam Altman later called "Concerning", while xAI's public response from @SpaceXAI said zero-data-retention users are exempt and that `/privacy` can disable retention and delete previously synced data.