If AI were trained on troves of personal info like SSNs, emails, phones then the leakage would be easily discovered and the model would be worthless for any commercial/mass-consumption purpose. (This doesnt rule out a PRISM-AI for NSA purposes of course.)

The way you describe it make PRISM sound like a contact book. I think it more like unwilling facebook.