Rescriber: Smaller-LLM-Powered User-Led Data Minimization for LLM-Based Chatbots
Not on the map. Why?
Abstract (arXiv)
The proliferation of LLM-based conversational agents has resulted in excessive disclosure of identifiable or sensitive information. However, existing technologies fail to offer perceptible control or account for users' personal preferences about privacy-utility tradeoffs due to the lack of user involvement. To bridge this gap, we designed, built, and evaluated Rescriber, a browser extension that supports user-led data minimization in LLM-based conversational agents by helping users detect and sanitize personal information in their prompts. Our studies (N=12) showed that Rescriber helped users reduce unnecessary disclosure and addressed their privacy concerns. Users' subjective perceptions of the system powered by Llama3-8B were on par with that by GPT-4o. The comprehensiveness and consistency of the detection and sanitization emerge as essential factors that affect users' trust and perceived protection. Our findings confirm the viability of smaller-LLM-powered, user-facing, on-device privacy controls, presenting a promising approach to address the privacy and trust challenges of AI.
Key facts. Cited by 16 papers in the map (data through 7 Oct 2026). Builds on 23 of its 68 references that are in the map. First posted on arXiv 10 Oct 2024.
Builds on
23 of 68 references.
References · 23
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,393
- 2023Sparks of Artificial General Intelligence: Early experiments with GPT-4cited by 2,579
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2023Are Emergent Abilities of Large Language Models a Mirage?cited by 515
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Modelscited by 424
- 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 415
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 405
- 2021Differentially Private Fine-tuning of Language Modelscited by 392
- 2022Deduplicating Training Data Mitigates Privacy Risks in Language Modelscited by 309
- 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 218
- 2022What Does it Mean for a Language Model to Preserve Privacy?cited by 194
11 more
- 2024PrivacyLens: Evaluating Privacy Norm Awareness of Language Models in Actioncited by 161
- 2021Counterfactual Memorization in Neural Language Modelscited by 155
- 2018Slalom: Fast, Verifiable and Private Execution of Neural Networks in Trusted Hardwarecited by 101
- 2023"It's a Fair Game", or Is It? Examining How Users Navigate Disclosure Risks and Benefits When Using LLM-Based Conversational Agentscited by 60
- 2023Reducing Privacy Risks in Online Self-Disclosures with Language Modelscited by 47
- 2024Trust No Bot: Discovering Personal Disclosures in Human-LLM Conversations in the Wildcited by 43
- 2020Operationalizing the Legal Principle of Data Minimization for Personalizationcited by 19
- 2024Granular Privacy Control for Geolocation with Vision Language Modelscited by 19
- 2024Human-Centered Privacy Research in the Age of Large Language Modelscited by 9
- 2024The Boy Who Survived: Removing Harry Potter from an LLM is harder than reportedcited by 4
- 2018Understanding Software Developers' Approach towards Implementing Data Minimizationcited by 2
Built on by
Citing papers per year: 2025: 9; 2026: 7.
16 papers.
Sort:
By area:
- 2025Position: Privacy Is Not Just Memorization!cited by 15
- 2025Agent Tools Orchestration Leaks More: Dataset, Benchmark, and Mitigationcited by 11
- 2025Operationalizing Data Minimization for Privacy-Preserving LLM Promptingcited by 8
- 2025How do we measure privacy in text? A survey of text anonymization metricscited by 5
- 2025Can Large Language Models Really Recognize Your Name?cited by 4
- 2025Not My Agent, Not My Boundary? Elicitation of Personal Privacy Boundaries in AI-Delegated Information Sharingcited by 3
- 2026Privasis: Synthesizing the Largest "Public" Private Dataset from Scratchcited by 3
- 2025Beyond PII: How Users Attempt to Estimate and Mitigate Implicit LLM Inferencecited by 2
- 2026GroupGPT: A Token-efficient and Privacy-preserving Agentic Framework for Multi-User Chat Assistantcited by 1
- 2025One Size Fits All? A Modular Adaptive Sanitization Kit (MASK) for Customizable Privacy-Preserving Phone Scam Detectioncited by 0
- 2025SPARK: Search Personalization via Agent-Driven Retrieval and Knowledge-sharingcited by 0
- 2026From Fragmentation to Integration: Exploring the Design Space of AI Agents for Human-as-the-Unit Privacy Managementcited by 0
4 more
- 2026Investigating In-Context Privacy Learning by Integrating User-Facing Privacy Tools into Conversational Agentscited by 0
- 2026BodhiPromptShield: Pre-Inference Prompt Mediation for Surface-Form Privacy Propagation in LLM Agent Pipelinescited by 0
- 2026Rethinking Agent Security as a Networking Problemcited by 0
- 2026GuardianAgent: Policy-Conditioned Risk-Adaptive Anonymization with Verified Adversarial Escalationcited by 0
- 2026GuardianAgent: Policy-Conditioned Risk-Adaptive Anonymization with Verified Adversarial Escalation29 Aug 2026
- 2026Rethinking Agent Security as a Networking Problem12 Aug 2026
- 2026BodhiPromptShield: Pre-Inference Prompt Mediation for Surface-Form Privacy Propagation in LLM Agent Pipelines7 Apr 2026
- 2026Investigating In-Context Privacy Learning by Integrating User-Facing Privacy Tools into Conversational Agents19 Mar 2026
- 2026GroupGPT: A Token-efficient and Privacy-preserving Agentic Framework for Multi-User Chat Assistant1 Mar 2026
- 2026From Fragmentation to Integration: Exploring the Design Space of AI Agents for Human-as-the-Unit Privacy Management4 Feb 2026
- 2026Privasis: Synthesizing the Largest "Public" Private Dataset from Scratch3 Feb 2026
- 2025SPARK: Search Personalization via Agent-Driven Retrieval and Knowledge-sharing30 Dec 2025
- 2025Agent Tools Orchestration Leaks More: Dataset, Benchmark, and Mitigation18 Dec 2025
- 2025How do we measure privacy in text? A survey of text anonymization metrics30 Nov 2025
- 2025One Size Fits All? A Modular Adaptive Sanitization Kit (MASK) for Customizable Privacy-Preserving Phone Scam Detection21 Oct 2025
- 2025Operationalizing Data Minimization for Privacy-Preserving LLM Prompting4 Oct 2025
4 more
- 2025Position: Privacy Is Not Just Memorization!2 Oct 2025
- 2025Not My Agent, Not My Boundary? Elicitation of Personal Privacy Boundaries in AI-Delegated Information Sharing26 Sep 2025
- 2025Beyond PII: How Users Attempt to Estimate and Mitigate Implicit LLM Inference15 Sep 2025
- 2025Can Large Language Models Really Recognize Your Name?20 May 2025
- 2025Agent Tools Orchestration Leaks More: Dataset, Benchmark, and Mitigationcited by 11
- 2026GroupGPT: A Token-efficient and Privacy-preserving Agentic Framework for Multi-User Chat Assistantcited by 1
- 2025SPARK: Search Personalization via Agent-Driven Retrieval and Knowledge-sharingcited by 0
- 2026BodhiPromptShield: Pre-Inference Prompt Mediation for Surface-Form Privacy Propagation in LLM Agent Pipelinescited by 0
- 2026Rethinking Agent Security as a Networking Problemcited by 0
- 2026Rethinking Agent Security as a Networking Problem12 Aug 2026
- 2026BodhiPromptShield: Pre-Inference Prompt Mediation for Surface-Form Privacy Propagation in LLM Agent Pipelines7 Apr 2026
- 2026GroupGPT: A Token-efficient and Privacy-preserving Agentic Framework for Multi-User Chat Assistant1 Mar 2026
- 2025SPARK: Search Personalization via Agent-Driven Retrieval and Knowledge-sharing30 Dec 2025
- 2025Agent Tools Orchestration Leaks More: Dataset, Benchmark, and Mitigation18 Dec 2025
- 2025Position: Privacy Is Not Just Memorization!cited by 15
- 2025Operationalizing Data Minimization for Privacy-Preserving LLM Promptingcited by 8
- 2025How do we measure privacy in text? A survey of text anonymization metricscited by 5
- 2025Can Large Language Models Really Recognize Your Name?cited by 4
- 2025Not My Agent, Not My Boundary? Elicitation of Personal Privacy Boundaries in AI-Delegated Information Sharingcited by 3
- 2026Privasis: Synthesizing the Largest "Public" Private Dataset from Scratchcited by 3
- 2025Beyond PII: How Users Attempt to Estimate and Mitigate Implicit LLM Inferencecited by 2
- 2025One Size Fits All? A Modular Adaptive Sanitization Kit (MASK) for Customizable Privacy-Preserving Phone Scam Detectioncited by 0
- 2026From Fragmentation to Integration: Exploring the Design Space of AI Agents for Human-as-the-Unit Privacy Managementcited by 0
- 2026Investigating In-Context Privacy Learning by Integrating User-Facing Privacy Tools into Conversational Agentscited by 0
- 2026GuardianAgent: Policy-Conditioned Risk-Adaptive Anonymization with Verified Adversarial Escalationcited by 0
- 2026GuardianAgent: Policy-Conditioned Risk-Adaptive Anonymization with Verified Adversarial Escalation29 Aug 2026
- 2026Investigating In-Context Privacy Learning by Integrating User-Facing Privacy Tools into Conversational Agents19 Mar 2026
- 2026From Fragmentation to Integration: Exploring the Design Space of AI Agents for Human-as-the-Unit Privacy Management4 Feb 2026
- 2026Privasis: Synthesizing the Largest "Public" Private Dataset from Scratch3 Feb 2026
- 2025How do we measure privacy in text? A survey of text anonymization metrics30 Nov 2025
- 2025One Size Fits All? A Modular Adaptive Sanitization Kit (MASK) for Customizable Privacy-Preserving Phone Scam Detection21 Oct 2025
- 2025Operationalizing Data Minimization for Privacy-Preserving LLM Prompting4 Oct 2025
- 2025Position: Privacy Is Not Just Memorization!2 Oct 2025
- 2025Not My Agent, Not My Boundary? Elicitation of Personal Privacy Boundaries in AI-Delegated Information Sharing26 Sep 2025
- 2025Beyond PII: How Users Attempt to Estimate and Mitigate Implicit LLM Inference15 Sep 2025
- 2025Can Large Language Models Really Recognize Your Name?20 May 2025