What privacy concerns matter most to ChatGPT users?

Researchers collected roughly 2.5 million posts (about 180K submissions and 2.35M comments) from r/ChatGPT between December 2022 and July 2024, fine-tuned a RoBERTa classifier on 1,200 hand-labeled posts to surface security-and-privacy (S&P) content, and applied it across the corpus to isolate 30,240 S&P-related posts for qualitative coding and an LLM-based thematic classifier. The resulting distribution: "users are primarily concerned about what personal and proprietary data these platforms collect and why (43.7%)," followed by platform and app security (28.9%), how data is used — "particularly for training models or third-party sharing" (22.5%) — compliance with privacy laws (9.6%), data retention (9.5%), and demands for "transparent data handling practices and clear control over their data" (11.1%).

The paper's own explanation for why collection worries dominate: conversational AI's natural-language interface and "ability to emulate human empathy often lead users to disclose more sensitive or personal information than they would on other platforms," so users scrutinize the intake point hardest. It then names three factors it argues are distinct from prior computing platforms — the conversational format inviting over-disclosure, training-time memorization that can later be "regurgitated during inference" (raising "right to be forgotten" questions), and rapid adoption into "high-stakes sectors such as finance, healthcare, and enterprise services," which turns the chat interface into "a gateway to high-stakes data" exposed to prompt injection and jailbreaks. A follow-on interrupted-time-series regression (not detailed in this excerpt beyond its existence) finds concern levels shift with "major events in the AI ecosystem," such as new feature launches.

This extends Does chatbot personalization build trust or expose privacy risks? from a single longitudinal study of personalized agents to population-scale, organic discourse: where that study showed personalization raises both trust and privacy concern inside one relationship, this one shows the concern is multi-stage even outside personalization specifically — collection, use, and retention are separately salient, and security and compliance sit alongside them as distinct demands. It also gives empirical backing to the transparency-and-control half of Which AI design principles for social media have research support?: that note found the disclosure and personalization principles untested in their source paper, whereas here 11.1% of coded posts explicitly ask for transparent handling and clear control, suggesting real user demand for that design direction rather than only a design hypothesis.

The excerpt does not establish that these proportions generalize beyond a self-selected, vocal, English-language Reddit population, nor that users' stated concerns track verified platform behavior — the authors note their own validation step sorts concerns into "presently valid," "resolved," or "misconceptions," meaning a share of the 43.7%/28.9%/etc. breakdown rests on perception rather than confirmed practice. The regression shows concern correlates with ecosystem events, not that any single event caused a shift. And the window (Dec 2022–Jul 2024) predates the wider rollout of autonomous shopping and task-delegating agents, so the lifecycle breakdown describes chatbot-era disclosure concerns, not agentic-commerce-era ones.