The N1 implant processes neural signals on its own chips and sends them over Bluetooth to the participant's paired phone or computer, where the N1 app runs. It has no internet connection of its own. Software updates arrive over the air through the paired device. Neuralink has not published which encryption it uses or how updates are verified.
On data, Neuralink's privacy policy says the company does not sell personal information, and that data from clinical trials is governed by the trial protocol, each participant's informed consent, and, where applicable, HIPAA authorization forms. Implants so far have taken place at sites in the US, Canada, and the UK, each with its own institutional safeguards.
Security researchers have described theoretical risks for brain-computer interfaces: eavesdropping on the wireless link, malicious software updates, or tampering with the decoder so that cursor control fails. Raw motor cortex signals show movement intentions, which are hard to interpret without the decoding models. No attack on a Neuralink implant has been publicly reported.
Because the implant pairs only with the user's own devices over a short-range link, an attacker would generally need to be close by. That gives it a smaller attack surface than an internet-connected phone.
The benefit for people with quadriplegia from spinal cord injury or ALS is independence. Participants have typed at up to 40 words per minute using imagined finger movements, according to Neuralink's January 2026 update, and they play games, design 3D models, and in the CONVOY study control robotic arms. Noland Arbaugh was using his implant about 10 hours a day by August 2025, and Nick Wray, who has ALS, feeds himself with a robotic arm.
Neuralink reported zero serious device-related adverse events as of January 2026. After many of the first participant's threads retracted, software changes restored and then improved his performance.
Critics point to the privacy cost of continuous brain recording, possible misuse by insurers or employers, and laws on neural data that are still being written. The PRIME study lasts about 6 years, so participants share data with Neuralink for a long time. Colorado, California, Montana, and Connecticut have passed laws that protect neural data, and the MIND Act introduced in Congress in September 2025 would direct the FTC to study the issue.
Neuralink reported 21 participants on January 28, 2026, and Neura Pod's patient table lists 27+ publicly known patients as of October 2026. First implant recipient Noland Arbaugh has acknowledged hacking is possible but values his independence: "Worth any risk." Jon Noble, a UK participant, wrote in December 2025 that more than 10,000 people were on the US waiting list.
This article was first published in October 2025 and corrected in October 2026; the latest patient count is on the patient table.