Most of the responsibility lies with chatbot developers and owners. Companies should ask whether they really need IP data, then program the bot to only store the information it needs to work correctly. This will minimize the data it holds, making it a less valuable target for hackers.