All news briefs
Product update

Google Search connects Instacart, Canva, and YouTube Music

The story in five sentences

  1. Google is beginning to roll out connected apps in Search AI Mode in the United States.
  2. Instacart, Canva, and YouTube Music can be linked to Search at launch.
  3. Users can add groceries to an Instacart cart or display templates from Canva.
  4. Playlists can also be created, saved to YouTube Music, and started directly.
  5. Google calls the connection secure but does not explain its technical privacy controls in the article.

Full explanation

Google is starting the rollout of connected apps for Search AI Mode in the United States during the week of July 16, 2026. Users can choose to connect selected services and prepare actions through Search. The initial integrations are Instacart, Canva, and YouTube Music. Availability is being introduced gradually rather than reaching every eligible user at once.

One example begins with planning a barbecue and moves the required groceries into an Instacart cart, where checkout is completed. Search can also present suitable Canva templates for a requested project. For music, it can create a playlist, save it to YouTube Music, and start playback directly. Google places these connections alongside Personal Intelligence.

Google describes the app connections as secure, but the article does not specify permission levels, retention periods, or the data exchanged between Search and each service. It also does not explain the underlying technical privacy mechanisms. The announcement provides no timetable outside the United States. It demonstrates the intended convenience while leaving important operational details about access, storage, and international rollout unspecified.

Privacy setting

May we measure pseudonymous page views and session replays?

With your consent, PostHog EU measures which pages are opened and additionally records your session: mouse movement, clicks, scrolling and the rendered page content are stored as a replayable reconstruction. Typed input is masked before sending. The contents of sign-in, sign-up, password recovery, the founder chat, the newsletter field, your email display, your quiz answers and the checklists are not recorded at all; on the sign-in and sign-up pages recording is paused. Addresses are always stored without query parameters. A random device identifier and technical connection data such as the IP address are processed as well. In addition, strictly defined usage events are measured: how far a post was read, which article element was used, which call to action was clicked, how a newsletter sign-up ended, how far you get in a course or in the feed (recording only whether a task was correct or incorrect, never your answer itself), which video you start, whether you switch the language, and how a sign-in or sign-up attempt ended — without the email address, without the password, and without the error message. Only values from a fixed list and whole numbers from fixed ranges are transmitted — no input and no free text. We also label production, internal, and automated test visits separately and derive whether a visit came from a known interface such as ChatGPT, Claude, or Perplexity from a known referring domain or a strictly allowed campaign value. The full referring address and query parameters are not sent, and this cannot identify a specific AI model. If PostHog's IP-based geo enrichment is enabled in the project, the service can derive an approximate country, continent, and region; we do not request browser or GPS location. Every visit is also assigned to a page area from a fixed list (for example home, blog, tools, account) — the area is sent, not the address. Page loading and stability metrics are measured as well (Core Web Vitals: LCP, CLS, INP, FCP), without network payloads. A click on a link leading away from the site is recorded only as the target domain from a fixed list, without path, query parameters, or link text. For the Idea Wheel, AI Labelling and Limit Reset tools only the kind of action is measured — spin, option changed, copy or export, for instance — never your input and never a result. Learn more about privacy

Without your consent no analytics code is loaded and nothing is recorded. You can withdraw at any time: withdrawal ends collection immediately; data already collected may have been transmitted by then and is deleted after the storage period.