Skip to content(if available)orjump to list(if available)

The Fall of Roam (2022)

The Fall of Roam (2022)

101 comments

·May 18, 2025

dzink

I started using Roam and as a proper geek, dug through the data it sends back and forth about me and my notes in the browser console. It was doing access logs and some random day I saw some random dude’s name in the access log for my notes. I reached out to ask. They told me he was a new employee. I saw no reason to save personal notes and ideas on a platform where any employee can enjoy them. Thereafter I took my notes to tools i wrote myself. Very enlightening to the incentives for building such tools.

coldblues

Another thing to add: I had deleted my Roam Research account a long time ago by now, but the media I uploaded on it is still available through the Firebase links.

baibhavbista

Hey Baibhav from the Roam Engineering team here

I think this might be a remnant of the time we did not delete media for graphs for cases we thought they might've just migrated to a new graph. For context, a semi-common pattern was for users to export their graph and restore to a new graph, so that they can change the name. Could you have gone through a similar process before deleting your account?

If you please contact support@roamresearch.com and provide the firebase links (even just a few should be okay to find the media), then we can proceed with the deletion for you. Sorry for the issue

baibhavbista

Hey,

I work at Roam on the engineering team.

I do not claim to know about this case, could you send me or support@roamresearch.com any more details you have re: this?

I can, however, tell you what the protocol has been since I've been working here at Roam (since 2021). No one can access user notes without an explicit written permission being granted. We have logs for when any graph is accessed via admins, and so, any member on the team accessing user notes without permission would be fired immediately. This was the operating policy and was made clear to me on my onboarding itself, along with the policy of immediate termination in the case of abuse.

Additionally, since Jan 2022, we have the ability for users to create End-to-end encrypted graphs. These graphs provide an extra level of protection - where your notes (& media) would be safe even in the worst case of Roam being hacked or compelled by law agencies to give info (to be clear, we haven't had either happen)

dzink

Hi Baibhav, This was in August 2020. I have attached screenshots as a reply to Josh's reply above. It was early in the days so I could understand the founder perusing as a way of seeing how users are using the site, but not some random dude with a gmail. The logs were showing in my local storage on the browser. My notes were just test notes, so I didn't have anything important to worry about, but I never used Roam as a result.

baibhavbista

Hey, clarifying (for anyone who sees this thread and not the other replies)

Roam actually DID NOT READ THEIR DATA (we have always had the policy of never accessing user data without explicit user permission). She just misunderstood what she was looking at.

More (verifiable) details in my comment here: https://news.ycombinator.com/item?id=44047945

hashbrown490

Hi, co-founder of Roam, Josh here. I don't recall your case ever being brought up to me, but as Baibhav said in his comment, we have strict no-access rule for engineers. They (and me) are only allowed to open your graph if given explicit permission by you through support. We have always had this rule and it's in our terms and conditions.

I think I found your account and I don't see any access logs to your graph from anyone other than your account. If you can provide any more info or screenshots of we would be able to dig deeper into exactly what you saw. It could have been a console log or a hard coded employee email in the code.

We've always cared deeply about user's privacy and ownership over their notes. This is why we've had this policy from the start and focused heavily on local first features and data portability. We offer fully offline graphs, where the data never touches our server and is never able to be accessed by anyone on our team. We also offer fully encrypted graphs, which are stored on our servers but are not able to be read by anyone without the password (our team cannot read your data).

dzink

You are in luck. I found a little video I took of the screen when it happened. It was from Aug 11 2020. Here is a screenshot with the log details: https://www.dropbox.com/scl/fi/g9jv8eh1ugi5qda0c6azx/0811202...

hashbrown490

Thanks for sharing, see Baibhav's response for what happened here, these logs you are seeing are for the public help graph, not your personal graph.

baibhavbista

Hey thank you for replying!

I understand what the screenshots are saying and this makes it clear that it was a misunderstanding and that NO ONE ACCESSED YOUR GRAPH(S). Please let me explain

Lets start with your first screenshot: https://www.dropbox.com/scl/fi/g9jv8eh1ugi5qda0c6azx/0811202...

If you take a look at this screenshot, it shows that the values you saw are in the indexeddb db "..._help-tx". The "help" bit denotes that those are the actions/txs taken in the "help" graph (which you can access via https://roamresearch.com/#/app/help). The reason you're seeing Bardia and Conor's emails there is because they wrote in the help graph (maybe they were writing guides there or adding stuff to the changelog). The reason the help graph data is in your indexedDB is because you probably opened the help graph at some point.

If someone had accessed your graphs, similar txs would have shown instead in the indexeddb dbs "..._DZ-tx" or "..._programming-with-categories-tx"

Everything I've said above can be verified if you say go to any Roam graph, and see what dbs are stored in IndexedDB in the devtools.

Hopefully this makes sense. Also, as Bardia replied in the email, we have never and will never edit user notes without explicit permission.

tl;dr: You thought you were looking at the logs for your graph but you were looking at the logs for the "help" graph. This is easily verifiable from your screenshots itself if you know where to look (details above).

null

[deleted]

stevage

Wow, that's very icky.

baibhavbista

Hey, clarifying

Roam actually DID NOT READ THEIR DATA (we have always had the policy of never accessing user data without explicit user permission). She just misunderstood what she was looking at.

More (verifiable) details in my comment here: https://news.ycombinator.com/item?id=44047945

stevage

OK THANKS FOR LETTING ME KNOW

arbus5672

Would you be open to providing some more details on this? Was this a private graph or a public graph?

dzink

It happened several years ago - when Conor was holding talks on Clubhouse. I had created an account with a few test notes and went back days later. The notes were not listed or linked anywhere. The person’s email or name was showing in the log but he was not even outed as an employee on linkedin at the time - so I originally thought someone has hacked my account or was accidentally given access to my notes. Then I asked the founder or the person and they said it was a new employee. I have screenshots somewhere but I don’t remember how i reached out to them - if it was a service chat, or email, or twitter, or clubhouse. I always check the network chatter on new sites I use - very enlightening about what they think of customers. A lot of times you see flags for things they want you or don’t want you to be, or what they want to upsell to you. Reactive sites put all kinds of logic in the front end where it doesn’t belong.

arbus5672

Thanks for elaborating! This is definitely not ok, and the response beyond unacceptable.

I've been an active user for a couple of years now and have substantial amount of information stored in Roam. I guess I should have known better than to have sensitive data stored in someone else's servers without encryption.

Time to explore Obsidian and see what the migration path looks like.

MichaelZuo

That does seem very shady, did you at least get a written apology from him/his boss?

radicaldreamer

Forget an apology, was there any accountability?

Have they clamped down on employee access? Was this "new employee" let go for accessing user data without any apparent reason?

baibhavbista

Hey, Baibhav from the Roam Engineering team here

Relevant reply here: https://news.ycombinator.com/item?id=44038085

mark242

Roam has always felt like a bit of a chore -- while it's easy enough to set up backlinks, having to do that one step has always been like a waste of time to me. This is the kind of thing that imo an agentic workflow could do for you:

- Just start typing

- Let the LLM analyze what you're typing, given the RAG database of everything else you've added, and be able to make those kinds of correlations quickly.

- One-button approve the backlinks that it's suggesting (or even go Cursor-style yolo mode for your backlinks).

Then, have a periodic process do some kind of directed analysis; are you keeping a journal, and want to make sure that you're writing enough in your journal? Are you talking about the same subjects over and over again? Should you mix things up? Things like that would be perfect for an LLM to make suggestions about. I don't know if Roam is thinking of doing this or not.

medstrom

But... backlinks are fully automated. If you just make forward-links that you'd normally do in the course of writing.

You're thinking of an optional step of adding extra links "just because", but IMO that's as a learning process in the beginning when you're not used to adding any forward-links whatsoever.

miki123211

Yes.

IMO the 3 table-stakes features for a notetaking app in 2025 are AI-powered search (including a question-answering capability), showing related / recommended notes (via RAG), and automated clustering (K Means + LLM) to maintain a category hierarchy.

zipy124

I think this might be the most exciting use-case of LLM's I've seen suggested here. I've struggled with exactly this problem with note-taking and personal knowledge-bases.

dreamcompiler

I'd love to have this but only if it runs entirely on my own machine or on a server I own. Uploading all my notes to somebody else's cloud is a nonstarter.

Can Ollama do this yet?

stevage

I'm not a huge fan of bringing AI into everything but as I was reading the blog post, it did feel like this is the place where it belongs.

getnormality

> But there’s one main reason that I don’t use it anymore: when I write my notes the thought, ‘Where am I going to put this?’ plagues me every time. It’s a direct and immediate pain. And it sometimes gets in the way of me even taking notes at all. I have this sensation many times a day and it’s deeply uncomfortable.

I had a similar problem when designing my personal management system last decade [1]. Every system you use, you have to stick to in order to get results. Sticking to a system can be emotionally draining to the point where you give up.

IMHO, that sense of emotional drain you get with fancy note-taking systems is tapping into something true. Only a small fraction of what we think we need to remember actually matters and will benefit from so much care to structuring it. The rest is a waste and a drain on our limited cognitive resources.

My solution is to initially write in a designated place that allows for less structure. In the to-do system, the main doc has a "landing zone" for action items to be quickly jotted down, then structured and organized later. In the project system, I'll have a "dump" file where I dump project thoughts that I'm not sure are important. I trust that if the ideas I jot down are actually important, the structure they deserve will come to me later.

Is that trust always right? Maybe not 100% of the time, but it seems like a more useful heuristic than "everything I put into this system needs lots of structure I don't feel like providing, so I don't, and it makes me feel like a failure".

[1] https://open.substack.com/pub/renormalize/p/my-markdown-proj...

chrisweekly

Yes! Keep it simple. Start w/ a daily note. Write stuff as you go. Extract from DN into a dedicated (transcluded) note when you reach the point where you're later searching for it across more than a couple DNs, or if you're confident that's going to happen. By default, I recommend a strong bias towards simplicity, w/ chronological, low-friction entries. "Where does it go" becomes moot if you are in your Daily Note: just write it here, now, and optionally extract it later only if/when doing so provides obvious benefit.

em-bee

the problem with any categorization is having to choose one and exactly one category. that's why i prefer tagging. i don't need to choose a specific category, instead i add any tag that fits.

kouru225

A post on Obsidian and a post on Roam today?

I don't know about you guys, but I'm an Obsidian lover and that's not gonna stop anytime soon. IMO the big problem about what this guy is saying can be boiled down to this:

>My most common behavior is to Actually Write the Notes. That’s why Roam needs to help me with the thought, ‘I don’t know where to put this.’ If it does that well, it makes the vast majority of my time spent in the app a breeze. If it does that poorly, it makes my experience so painful that I want to switch systems.

The lesson of Obsidian for me has been that organization is creativity. If what you want is to have an ideological maid that can organize all your thoughts for you, then you're gonna have a bad time with any note taking service (although I'm sure you can develop llm plugins to do this in a way that you personally enjoy now.) What's beneficial about these note apps is that they put this issue directly in front of your face. Either rise to meet it or go back to pretending like organization doesn't matter and avoid the responsibility of creativity.

Using Obsidian goes through stages much like a growing business. You start and you have personal relationships with all the notes so you can remember them, but once you get enough notes you realize it's too much to manage just using personal relationships and you need to start implementing a system. As you get better, your system changes, leaving a paper trail of notes with different systems. That's why the only thing that I think these note apps need is a deprecation system, but otherwise IMO they're perfect.

Brajeshwar

I like Obsidian.[1] For organization, I like the PARA method.[2] I do also have my addition on top such as "0-Inbox" where un-sorted files lands. Otherwise, search and opening files directly via the keyboard shortcut in Obsidian works most of the times. But that would be just me, I'm known to be pretty organized (people told me many times). Wake me up in the middle of the night and ask me where something is and I'm likely to tell you exactly where to find it. I learned that trick from an uncle growing up.

Steph Ango, CEO of Obsidian, has a nice article on how he uses Obsidian.[3]

1. https://brajeshwar.com/2025/obsidian/

2. https://fortelabs.com/blog/para/

3. https://stephango.com/vault

Noumenon72

How can you organize stuff in obsidian? You have folders and search and that's it. I was thinking of switching from Word docs and putting my faith in backlinks to keep everything together, but now I'm not sure.

TheFreim

> How can you organize stuff in obsidian? You have folders and search and that's it.

You can use folders, tags, properties, links between notes (exporable through the links panel per file or the graph view), and there are extensions that let you add more advanced functionality. In the end, any system will require you to come up with your own system of organization.

podunkPDX

My strategy of dumping various notes in a semicoherently-named directory tree and then grepping through them makes me feel like a caveman, but it works for me. I feel that tools like this are overcomplicating things.

canvascritic

Not surprised to see this. Whats interesting to me in all this is the misplaced faith in emergent structure.

Roam bet on the idea that if you link enough atomic notes, structure will self-organize.

Which is such a weird fantasy if you spend a few minutes thinking about it. Try writing code like that or building a company or just about anything else! Why should notetaking and archive development be any different

It's clear you need some sort of editorial hand to create something maintainable and future proof. Like zettelkasten had Luhmann’s obsessive discipline behind it. Evidently roam had um. enthusiasm and javascript?

and yeah, it’s telling that the comparison is to IDEs. Imagine an IDE that dumped every snippet you typed into a graph database and expected you to recompile coherence out of it by browsing links. thats what roam felt like after the honeymoon.

In general most of Roam's target should want to lean harder into opinionated workflows. there’s a reason tools like linear or notion are winning. they’re structured enough to relieve cognitive load, flexible enough to adapt. Roam tried to be emacs, but turns out most users don’t want to configure their own productivity dialect.

also, lol at the idea of "automated taxonomy". The entire knowledge management industry keeps rediscovering ontologies like they’re new. We are probably going to reinvent OWL at some point and give it a name like "neuroschema" or something

mmooss

Aren't you describing (and Roam using) what is essentially brain mapping, which is a well-established technology based on how our memories actually work?

canvascritic

I'm not a fan of neurophysiology analogies because it veer into pseudoscience, but I'll play along.

Roam implemented static bidirectional links and called it associative memory. in reality, it's closer to mind-mapping software with backlinks. So without mechanisms for reinforcement (surfacing old notes intelligently), pruning (forgetting irrelevant junk), or plasticity (reorganizing in response to use), the system becomes a junkyard of half-formed thoughts.

Brains forget for a reason, roam doesn't

josephg

> Brains forget for a reason, roam doesn't

I think this is the key mistake in Roam's design (and in many ways, obsidian and friends). They appeal to a dream some people have that maybe if you never forget anything, you'll get smarter forever. (Or something like that).

The problem is that there's many benefits to having a mind which forgets things. That property lets us grow and change over time - and move on from old ideas or old ways of thinking. Not necessarily because they're bad; but because we become a different person from the person who had that thought.

Trauma is an extreme case of this. Its essentially a disorder of memory; where we etch some old memory in stone. Because we don't let ourselves forget it, we inevitably build structure / thought patterns around that memory. "This one time __" - "As a result, deep down I believe that I am fundamentally ___ (unsafe / unworthy / stupid / unlovable / ...)". Trauma work is in many ways a slow process of learning to unclench your mind from those past experiences, to allow yourself to "move on" from them. (Ie, forget the emotional impact they have today.)

Its also kind of obvious in software or architecture. You can't just keep adding to an old structure forever. Software gets harder to build the bigger it gets. Same with buildings, books, teams and more. If everything new needs to fit with everything that has come before, its an O(n^2) job. Of course roam suffers from this too. The default "remember everything forever" default is naive and silly. Our brains don't work best like that.

mmooss

You can't delete things?

Really, I think the user in that case needs to be much more choosy about what they put in the database. It will save them time and greatly improve the signal-to-noise ration.

0_gravitas

Logseq has been my go-to for a couple of years now, it's datalog-esque query language is great for automated page generation, and it's implicit "indirect" links are also really nice- the block-level note primative fits very neatly in my head as well.

rgreeko42

Same. It's great. And I set Logseq to use Org format instead of MD in case I ever want or need to move my notes into Org Roam proper (e.g. if Logseq goes kaput someday).

loveparade

> When I write my notes the thought, ‘Where am I going to put this?’ plagues me every time.

This is so true. Regardless of how useful note taking actually is, the kind of people using these apps are those who like the idea of having everything "perfectly organized" - and this friction and uncertainty of where to put notes gets in the way of that. I'm the same. Every time I know that I don't have a proper place for a note I stop taking notes alltogether. I guess that's for the better.

m3kw9

I used to use Roam, but they move like molasses, no new features or fixes for weeks. F’ing on cruise 40 in a 60 zone. Also it didn’t give me much “connecting the dots”. I went back to simple Apple notes, save myself some time trying to squeeze value from the subscription

sakesun

Similar to Logseq. They are both built with Clojure.

balencpp

What are you implying by that?

HungSu

The author began to realise the truth: that the quality of his writing is very low on average. Then he moved away from that realisation to the thought that Roam or some other kind of automation could somehow save him.

Perhaps what he needs is for the tool to automatically ask him "Is it okay to delete this note from 60 days ago?" That should be long enough for him to lose any attachment to what he wrote and a lot of the time he should say yes, and delete the crap.

swah

Tana, Capacities, Bear, Lgseq all have backlinks and other stuff from Roam for years now or so, thanks to Roam IMO. I wish they were able to make some good money from this innovation but they moved too slow at some crucial moment.

OTOH the app that really won was Obsidian, due to flawless execution with the "local first" principle. Being closed source and "not listening too much to the community" weren't issues, they just focused and improved consistently.

bachmeier

> Tana, Capacities, Bear, Lgseq all have backlinks and other stuff from Roam for years now or so, thanks to Roam IMO. I wish they were able to make some good money from this innovation

I debunked this myth on the prior discussion in 2022. Backlinks were a well-known idea in the wiki community, to the point that they were part of WikiMatrix, and it's almost certainly the case that Roam copied the idea. TiddlyWiki had backlinks at least as early as 2006. https://news.ycombinator.com/item?id=30330835

dalmo3

I'm surprised to this day everyone still focuses on backlinks.

For me Roam's killer feature was transclusion. When they launched, no one else had it. I could write all my notes in the daily notes and still have a sufficiently-well-organised knowledge base for specific subjects, tasks, projects.

These days I use obsidian for the simplicity/portability of .md.

bachmeier

> For me Roam's killer feature was transclusion. When they launched, no one else had it.

Roam also copied the idea of transclusion. I'm not sure who is included in "no one else" but Wikipedia's had it pretty much from the beginning. See this page from 2005[1]

The term was coined in a book in 1980[2]. This page from 2007[3] says "...CvWiki, developed in 1997 by Peter Merel, which was the first Wiki clone to have functioning transclusion, backlinks and WayBackMode."

[1] https://en.wikipedia.org/w/index.php?title=Wikipedia:Transcl...

[2] https://en.wikipedia.org/wiki/Transclusion#History_and_imple...

[3] https://en.wikipedia.org/w/index.php?title=History_of_wikis&...

zahlman

When I tried to read this, I was sent through several redirects with a total of somewhere around 80MB or more of data downloaded, to end up at an otherwise blank "Enable JavaScript and cookies to continue" screen.

Why do people tolerate the WWW working like this?