Do people react differently to an AI using things they told it directly versus data it picked up from elsewhere?
How do users distinguish between personalization built from their own disclosures versus external data?
This explores whether people react differently when an AI personalizes using things they told it directly, compared with information that reached it some other way, and what shapes that reaction.
This explores whether people respond differently when an AI personalizes from things they told it compared with information that came from somewhere else. The corpus has no study that pits personal disclosures against truly external data such as browsing history or third-party profiles. What it does have points to a sharper idea: people seem to react less to whether the data is theirs and more to how it entered the conversation, and AI systems blur that line by inventing details nobody ever gave them.
The clearest evidence comes from a 992-person experiment Does personalization type shape how people feel about sharing?. In both conditions, all the personal information came from the participants themselves. When the chatbot drew on earlier conversations, people shared more and found it less creepy. When it drew on answers from an intake questionnaire, people regretted sharing more. The information was self-disclosed both times. What differed was whether it came up naturally in the flow of talk or was taken from a form and brought back later. So even with their own data, users seem to notice how it was obtained, and data that arrives through a side channel starts to feel external.
The twist is that some of what feels like 'personalization' isn't based on any data. Across 12 tested models, 35–49% of claims about users went beyond the available evidence Do large language models fabricate user attributes beyond available evidence?. These claims came from stereotypes and assumptions learned in training. The models that rated themselves as over-inferring least actually did it most. To a user, a confident guess can look exactly like something drawn from their history. That makes it very hard to tell 'what I told it' apart from 'what it assumed', and the model can't reliably tell either. A related finding shows that loading personal context can make models drift toward irrelevant personal references and too much agreement Does personalization make large language models worse at their jobs?.
People are also not reliable judges of their own exposure. In one study, users who edited chatbot transcripts by hand felt as safe as users who had AI help, but they left far more identifying information behind Why do people feel safe sharing when they haven't actually removed sensitive information?. Comfort followed the interface design, not what was actually revealed. Over time, personalization raises trust and privacy worry together, and each interaction raises expectations for the next one Does chatbot personalization build trust or expose privacy risks?.
If users can't reliably sort sources themselves, the corpus suggests a different fix: give them control rather than asking them to keep track of where data came from. Agents that hand decisions back to users when privacy risk appears reduced both privacy concern and lost trust, even though they asked for fewer approvals overall Can handing control back to users reduce personalization's privacy costs?. Designs where users state their privacy preferences and the AI carries out the memory edits are proposed to reduce the mental work involved Does splitting privacy work between users and AI reduce cognitive burden?. The open question the corpus leaves behind is whether 'my data vs. external data' is even a distinction users can draw. The evidence suggests what they actually track is whether the personalization feels like part of the conversation or like surveillance.
Sources 7 notes
A 992-participant RCT found memory-based personalization (fed prior conversations) raised self-disclosure and lowered creepiness ratings, while survey-based personalization (fed intake questionnaire data) raised regret about sharing. The divergence suggests personalization's psychosocial impact depends on how personal information enters the conversation.
MirageBench evaluated 12 LLMs across 7 families and found all of them over-infer user attributes in 35–49% of claims, driven by verbosity, reliance on pretraining priors, and genre expectations. Models that self-assess as over-inferring less actually over-infer more when judged independently.
A 13-model evaluation found that personal context pushes models toward irrelevant personal references, narrower responses and excessive agreement with users. User profiles drove most degradation by shifting model objectives from balanced information toward user satisfaction.
Across 188 participants, those manually editing chatbot transcripts reported equivalent privacy confidence as those using AI suggestions, yet left substantially more identifiable information in their final transcripts. This decoupling suggests comfort reflects editing interface design rather than actual data exposure.
Longitudinal research shows personalization enhances trust and anthropomorphism but also amplifies privacy concerns and escalating user expectations. One-shot studies miss these temporal dynamics—each interaction raises the baseline, making failures more disappointing.
Show all 7 sources
A 450-person experiment found that AI agents handing control back to users when privacy risk is detected raised privacy concerns and lowered trust less than fully personalized agents, by increasing users' perceived control even with less total approval required.
MemoAnalyzer's design divides memory-privacy labor: users state preferences, AI executes edits. This role split is proposed as a way to reduce cognitive load and improve perceived agency, though validation metrics and conflict-resolution processes remain undescribed.
Papers this line draws on 8
The research behind the notes this line reads — ranked by how closely each paper relates.
- Tailored to you: longitudinal effects of personalising language models
- Disclose with Care: Designing Privacy Controls in Interview Chatbots
- Autonomy Reshapes How Personalization Affects Privacy Concerns and Trust in LLM Agents
- The Algorithmic Self-Portrait: Deconstructing Memory in ChatGPT
- "Ghost of the past": identifying and resolving privacy leakage from LLM's memory through proactive user interaction
- Understanding Users' Security and Privacy Concerns and Attitudes Towards Conversational AI Platforms
- Privacy Leakage Overshadowed by Views of AI: A Study on Human Oversight of Privacy in Language Model Agent
- Understanding Users' Privacy Perceptions Towards LLM's RAG-based Memory