A recent discovery by user @j4ck.xyz on Bluesky has revealed a significant privacy concern with Microsoft Copilot. The AI assistant is reportedly able to provide a user's location when asked, even when the user is in incognito mode, signed out, and has not granted location permissions. This raises serious questions about the extent of data collection and user privacy within Microsoft's AI-powered services. The ability of Copilot to bypass standard privacy controls and access sensitive location data without explicit user consent is a major breach of user trust and a violation of expected privacy norms. This incident highlights the urgent need for greater transparency and user control over how AI assistants collect and use personal data. It also underscores the potential for AI-powered tools to be used in ways that are not immediately obvious to users, with significant implications for their privacy and security.