Prompt Public Large Language Models to Synthesize Data for Private On-device Applications
Not on the map. Why?
Abstract (arXiv)
Pre-training on public data is an effective method to improve the performance for federated learning (FL) with differential privacy (DP). This paper investigates how large language models (LLMs) trained on public data can improve the quality of pre-training data for the on-device language models trained with DP and FL. We carefully design LLM prompts to filter and transform existing public data, and generate new data to resemble the real user data distribution. The model pre-trained on our synthetic dataset achieves relative improvement of 19.0% and 22.8% in next word prediction accuracy compared to the baseline model pre-trained on a standard public dataset, when evaluated over the real user data in Gboard (Google Keyboard, a production mobile keyboard application). Furthermore, our method achieves evaluation accuracy better than or comparable to the baseline during the DP FL fine-tuning over millions of mobile devices, and our final model outperforms the baseline in production A/B testing. Our experiments demonstrate the strengths of LLMs in synthesizing data close to the private distribution even without accessing the private data, and also suggest future research directions to further reduce the distribution gap.
Key facts. Cited by 17 papers in the map (data through 7 Oct 2026). Builds on 43 of its 56 references that are in the map. First posted on arXiv 5 Apr 2024.
Builds on
43 of 56 references.
References · 43
- 2023GPT-4 Technical Reportcited by 18,132
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,592
- 2020Scaling Laws for Neural Language Modelscited by 6,411
- 2019Advances and Open Problems in Federated Learningcited by 3,021
- 2019The Curious Case of Neural Text Degenerationcited by 2,881
- 2022Self-Instruct: Aligning Language Models with Self-Generated Instructionscited by 2,674
- 2020mT5: A massively multilingual pre-trained text-to-text transformercited by 1,813
- 2018Hierarchical Neural Story Generationcited by 1,182
31 more
- 2023PaLM 2 Technical Reportcited by 1,154
- 2019Towards Federated Learning at Scale: System Designcited by 826
- 2018Federated Learning for Mobile Keyboard Predictioncited by 565
- 2023Textbooks Are All You Needcited by 561
- 2023Textbooks Are All You Need II: phi-1.5 technical reportcited by 559
- 2023TinyStories: How Small Can Language Models Be and Still Speak Coherent English?cited by 425
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 405
- 2021Differentially Private Fine-tuning of Language Modelscited by 392
- 2016Concentrated Differential Privacy: Simplifications, Extensions, and Lower Boundscited by 339
- 2015LSTM: A Search Space Odysseycited by 315
- 2021A Field Guide to Federated Optimizationcited by 312
- 2020Differentially Private Learning Needs Better Features (or Much More Data)cited by 233
- 2023Large Language Model as Attributed Training Data Generator: A Tale of Diversity and Biascited by 230
- 2022What Does it Mean for a Language Model to Preserve Privacy?cited by 194
- 2021Practical and Private (Deep) Learning without Sampling or Shufflingcited by 169
- 2022Synthetic Text Generation with Differential Privacy: A Simple and Practical Recipecited by 108
- 2021Papaya: Practical, Private, and Scalable Federated Learningcited by 89
- 2022Position: Considerations for Differentially Private Learning with Large-Scale Public Pretrainingcited by 86
- 2024Differentially Private Synthetic Data via Foundation Model APIs 2: Textcited by 74
- 2022Where to Begin? On the Impact of Pre-Training and Initialization in Federated Learningcited by 71
- 2023RewriteLM: An Instruction-Tuned Large Language Model for Text Rewritingcited by 67
- 2023Harnessing large-language models to generate private synthetic textcited by 65
- 2023Federated Learning of Gboard Language Models with Differential Privacycited by 64
- 2023(Amplified) Banded Matrix Factorization: A unified approach to private trainingcited by 49
- 2024Privacy-Preserving Instructions for Aligning Large Language Modelscited by 34
- 2023Can Public Large Language Models Help Private Cross-device Federated Learning?cited by 30
- 2023GPT-FL: Generative Pre-trained Model-Assisted Federated Learningcited by 24
- 2023Selective Pre-training for Private Fine-tuningcited by 22
- 2023Privately Customizing Prefinetuning to Better Match User Data in Federated Learningcited by 12
- 2023Towards an On-device Agent for Text Rewritingcited by 7
- 2023Private Federated Learning in Gboardcited by 5
Built on by
Citing papers per year: 2024: 6; 2025: 7; 2026: 4.
17 papers.
Sort:
By area:
- 2024PrE-Text: Training Language Models on Private Federated Data in the Age of LLMscited by 29
- 2024Private prediction for large-scale synthetic text generationcited by 24
- 2024Federated Large Language Models: Current Progress and Future Directionscited by 22
- 2024Federated Learning in Practice: Reflections and Projectionscited by 15
- 2025Synthesizing Privacy-Preserving Text Data via Finetuning without Finetuning Billion-Scale LLMscited by 15
- 2025POPri: Private Federated Learning using Preference-Optimized Synthetic Datacited by 14
- 2024Data-adaptive Differentially Private Prompt Synthesis for In-Context Learningcited by 10
- 2024A Hassle-free Algorithm for Private Learning in Practice: Don't Use Tree Aggregation, Use BLTscited by 9
- 2025Clustering and Median Aggregation Improve Differentially Private Inferencecited by 5
- 2025FedDAG: Federated Domain Adversarial Generation Towards Generalizable Medical Image Analysiscited by 2
- 2025Synthesizing and Adapting Error Correction Data for Mobile Large Language Model Applicationscited by 2
- 2025On the Security and Privacy of Federated Learning: A Survey with Attacks, Defenses, Frameworks, Applications, and Future Directionscited by 2
5 more
- 2025Privacy Preserving In-Context-Learning Framework for Large Language Modelscited by 2
- 2026Differentially Private Preference Data Synthesis for Large Language Model Alignmentcited by 1
- 2026Curation Leaks: Membership Inference Attacks against Data Curation for Machine Learningcited by 0
- 2026Resource-Adaptive Federated Text Generation with Differential Privacycited by 0
- 2026Synthetic Data Characterization via Training Dynamicscited by 0
- 2026Synthetic Data Characterization via Training Dynamics30 Sep 2026
- 2026Differentially Private Preference Data Synthesis for Large Language Model Alignment29 May 2026
- 2026Resource-Adaptive Federated Text Generation with Differential Privacy7 Mar 2026
- 2026Curation Leaks: Membership Inference Attacks against Data Curation for Machine Learning28 Feb 2026
- 2025Privacy Preserving In-Context-Learning Framework for Large Language Models17 Sep 2025
- 2025On the Security and Privacy of Federated Learning: A Survey with Attacks, Defenses, Frameworks, Applications, and Future Directions19 Aug 2025
- 2025Clustering and Median Aggregation Improve Differentially Private Inference5 Jun 2025
- 2025Synthesizing and Adapting Error Correction Data for Mobile Large Language Model Applications24 May 2025
- 2025POPri: Private Federated Learning using Preference-Optimized Synthetic Data23 Apr 2025
- 2025Synthesizing Privacy-Preserving Text Data via Finetuning without Finetuning Billion-Scale LLMs16 Mar 2025
- 2025FedDAG: Federated Domain Adversarial Generation Towards Generalizable Medical Image Analysis22 Jan 2025
- 2024Data-adaptive Differentially Private Prompt Synthesis for In-Context Learning15 Oct 2024
5 more
- 2024Federated Learning in Practice: Reflections and Projections11 Oct 2024
- 2024Federated Large Language Models: Current Progress and Future Directions24 Sep 2024
- 2024A Hassle-free Algorithm for Private Learning in Practice: Don't Use Tree Aggregation, Use BLTs16 Aug 2024
- 2024Private prediction for large-scale synthetic text generation16 Jul 2024
- 2024PrE-Text: Training Language Models on Private Federated Data in the Age of LLMs5 Jun 2024
- 2026Synthetic Data Characterization via Training Dynamicscited by 0
- 2026Synthetic Data Characterization via Training Dynamics30 Sep 2026
- 2024PrE-Text: Training Language Models on Private Federated Data in the Age of LLMscited by 29
- 2024Private prediction for large-scale synthetic text generationcited by 24
- 2024Federated Large Language Models: Current Progress and Future Directionscited by 22
- 2024Federated Learning in Practice: Reflections and Projectionscited by 15
- 2025Synthesizing Privacy-Preserving Text Data via Finetuning without Finetuning Billion-Scale LLMscited by 15
- 2024Data-adaptive Differentially Private Prompt Synthesis for In-Context Learningcited by 10
- 2024A Hassle-free Algorithm for Private Learning in Practice: Don't Use Tree Aggregation, Use BLTscited by 9
- 2025Clustering and Median Aggregation Improve Differentially Private Inferencecited by 5
- 2025FedDAG: Federated Domain Adversarial Generation Towards Generalizable Medical Image Analysiscited by 2
- 2025Synthesizing and Adapting Error Correction Data for Mobile Large Language Model Applicationscited by 2
- 2025On the Security and Privacy of Federated Learning: A Survey with Attacks, Defenses, Frameworks, Applications, and Future Directionscited by 2
- 2025Privacy Preserving In-Context-Learning Framework for Large Language Modelscited by 2
12 most cited of 13 All 13 (JSON)
- 2026Resource-Adaptive Federated Text Generation with Differential Privacy7 Mar 2026
- 2025Privacy Preserving In-Context-Learning Framework for Large Language Models17 Sep 2025
- 2025On the Security and Privacy of Federated Learning: A Survey with Attacks, Defenses, Frameworks, Applications, and Future Directions19 Aug 2025
- 2025Clustering and Median Aggregation Improve Differentially Private Inference5 Jun 2025
- 2025Synthesizing and Adapting Error Correction Data for Mobile Large Language Model Applications24 May 2025
- 2025Synthesizing Privacy-Preserving Text Data via Finetuning without Finetuning Billion-Scale LLMs16 Mar 2025
- 2025FedDAG: Federated Domain Adversarial Generation Towards Generalizable Medical Image Analysis22 Jan 2025
- 2024Data-adaptive Differentially Private Prompt Synthesis for In-Context Learning15 Oct 2024
- 2024Federated Learning in Practice: Reflections and Projections11 Oct 2024
- 2024Federated Large Language Models: Current Progress and Future Directions24 Sep 2024
- 2024A Hassle-free Algorithm for Private Learning in Practice: Don't Use Tree Aggregation, Use BLTs16 Aug 2024
- 2024Private prediction for large-scale synthetic text generation16 Jul 2024
12 newest of 13 All 13 (JSON)