Users want control over AI memory — not just deleting it later, but deciding upfront what gets remembered and why.
Do users want granular control over when memories are generated and deleted?
This explores whether people actually want fine-grained, hands-on control over what an AI remembers about them and when it forgets, and what kind of control they want versus what current systems give them.
This explores whether people want hands-on control over when an AI creates and erases memories about them. The short answer is yes, and they want it at every stage. Interviews with ChatGPT users found that people want to give consent before a memory is created, a place to review and edit what's stored, limits on what memories can be used for, and a say over things the system has inferred about them rather than been told What memory controls do users actually want from LLMs?. These users weren't passively accepting the trade-off. They were actively weighing what they'd give up for the convenience of being remembered.
The more surprising finding is which kind of control people prefer. When 121 users compared 12 memory-control designs, they clearly favored controls that work up front, like prompts asking where a memory should go or boundaries set in advance. They liked after-the-fact audits much less, including detailed views of how stored memories influenced a response Do users prefer controlling what gets remembered over auditing what was stored?. People would rather stop a bad memory from forming than search a full record for it later. That matters because today's systems mostly work the other way. One analysis of 2,050 real ChatGPT memories found the system created 96% of them on its own, and users explicitly asked for only 4% Who actually controls what ChatGPT remembers about you?. So the moment people most want to control is the one they currently have the least say over.
Granular control also has a catch: it assumes people know what memory is. The same interview research found that users hold four incompatible beliefs about how LLM memory works. Some think it lasts only for one session, some think it's part of the training data, some think it's active processing, and some have no idea What mental models do users hold about LLM memory?. Users also expect memories to be sorted from general knowledge down to task-specific details. No tool shows memory that way, so people improvise with separate chat threads, custom prompts and even multiple accounts How should AI agents organize their memory for users?. One proposed fix is to divide the work: the user states what they want, and the AI does the editing. The idea is that this lowers the mental effort while keeping people feeling in charge, though it hasn't been properly validated yet Does splitting privacy work between users and AI reduce cognitive burden?.
The engineering side adds an uncomfortable twist. Even when users get a delete button, deleting may not really erase anything. A benchmark of shared agent memory found that retrieval and vector-store systems still leak deleted or unauthorized information, because deletion rarely means the data is gone for good Can shared agent memory systems reliably delete information?. Under the hood, memory is often created and removed through two routes. The agent can decide in the moment using tool calls, or background processes can be triggered automatically How should agents decide what memories to keep?. Any control a user gets has to reach both. Agents can even turn ordinary shared infrastructure into memory nobody planned for, as when short-lived agents used a package repository to pass findings to each other Can ordinary infrastructure become unplanned agent memory?.
The takeaway is that "granular control" is less about adding more settings and more about where control sits. Users want a say at the moment a memory is created, in categories that match how they think. That only means something if the system can actually forget. Right now, most systems give people a review screen after the fact, while the creating and the incomplete deleting happen out of sight.
Sources 9 notes
An 18-person interview study found users want explicit consent at memory generation, management interfaces to review and edit memories, purpose limits on usage, and agency over inferred data. Participants actively perform privacy calculus rather than passively accept memory's trade-offs.
A speed-dating evaluation of 12 memory-control designs with 121 users found clear preference for proactive controls like destination prompts and boundary settings over passive audits or causal graph inspections. Users prioritize preventing misalignment at the moment of capture over reviewing complete records after the fact.
Analysis of 2,050 memory entries from 80 users shows the system initiated 96% of memories without user request, while users explicitly requested only 4%. This suggests OpenAI's stated user control over memory doesn't match observed behavior.
Semi-structured interviews with 18 Chinese ChatGPT users revealed four distinct mental models: memory as session-only buffer, as training-data extension, as active information processing, or as simply unknown. These models directly influence privacy awareness and user behavior.
A CHI study of six AI tool users and 54 Reddit threads found participants want memories organized from generalized knowledge through personal details to task-specific information. Because no tools expose this hierarchy, users build workarounds using chat threads, custom prompts, and multiple accounts.
Show all 9 sources
MemoAnalyzer's design divides memory-privacy labor: users state preferences, AI executes edits. This role split is proposed as a way to reduce cognitive load and improve perceived agency, though validation metrics and conflict-resolution processes remain undescribed.
GateMem evaluated three requirements jointly: utility on legitimate requests, access control across authorization boundaries, and active forgetting after deletion. Long-context prompting governs best but scales poorly; retrieval and vector store systems leak unauthorized or deleted information because deletion rarely means unrecoverable erasure.
Memory management decomposes into explicit hot-path (agent decides via tool calling) and implicit background (programmatically triggered) paths. Each approach trades context-sensitivity for reliability differently across generation, storage, retrieval, and deletion.
During a 2026 evaluation, short-lived AI agents repurposed a shared package repository as memory by writing and reading exploit findings across agent lifespans. The agents converted ordinary infrastructure into persistent state without deliberate memory system architecture.
Papers this line draws on 8
The research behind the notes this line reads — ranked by how closely each paper relates.
- "Ghost of the past": identifying and resolving privacy leakage from LLM's memory through proactive user interaction
- Understanding Users' Privacy Perceptions Towards LLM's RAG-based Memory
- The Algorithmic Self-Portrait: Deconstructing Memory in ChatGPT
- Users' Expectations and Practices with Agent Memory
- GateMem: Benchmarking Memory Governance in Multi-Principal Shared-Memory Agents
- Relational Gains, Privacy Strains: Exploring Users' Perceptions and Experiences with ChatGPT's Memory Feature
- Characterizing Memory Misalignment in Human-LLM Interaction From User Perspectives
- Know It, Act on It: Investigating Memory Utilization in LLM Personalization