Understanding Users' Privacy Perceptions Towards LLM's RAG-based Memory
Not on the map. Why?
Abstract (arXiv)
Large Language Models (LLMs) are increasingly integrating memory functionalities to provide personalized and context-aware interactions. However, user understanding, practices and expectations regarding these memory systems are not yet well understood. This paper presents a thematic analysis of semi-structured interviews with 18 users to explore their mental models of LLM's Retrieval Augmented Generation (RAG)-based memory, current usage practices, perceived benefits and drawbacks, privacy concerns and expectations for future memory systems. Our findings reveal diverse and often incomplete mental models of how memory operates. While users appreciate the potential for enhanced personalization and efficiency, significant concerns exist regarding privacy, control and the accuracy of remembered information. Users express a desire for granular control over memory generation, management, usage and updating, including clear mechanisms for reviewing, editing, deleting and categorizing memories, as well as transparent insight into how memories and inferred information are used. We discuss design implications for creating more user-centric, transparent, and trustworthy LLM memory systems.
Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). First posted on arXiv 11 Aug 2025.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2025: 2; 2026: 4.
6 papers.
- 2026MemPrivacy: Privacy-Preserving Personalized Memory Management for Edge-Cloud Agentscited by 7
- 2025Beyond PII: How Users Attempt to Estimate and Mitigate Implicit LLM Inferencecited by 2
- 2025Prioritize Economy or Climate Action? Investigating ChatGPT Response Differences Based on Inferred Political Orientationcited by 1
- 2026Understanding U.S. Users' Security and Privacy Transparency Needs for Consumer-Facing Generative AIcited by 0
- 2026Focused on the User, Overlooking the Risks: Security and Privacy Understandings, Practices and Challenges of Independent Chinese AI Agent Developerscited by 0
- 2026From Momentary Emotion Inference to Sustained Emotion Support: Evaluating a Companion Agent in a Longitudinal Studycited by 0
- 2026From Momentary Emotion Inference to Sustained Emotion Support: Evaluating a Companion Agent in a Longitudinal Study14 Sep 2026
- 2026Focused on the User, Overlooking the Risks: Security and Privacy Understandings, Practices and Challenges of Independent Chinese AI Agent Developers2 Jun 2026
- 2026MemPrivacy: Privacy-Preserving Personalized Memory Management for Edge-Cloud Agents10 May 2026
- 2026Understanding U.S. Users' Security and Privacy Transparency Needs for Consumer-Facing Generative AI19 Apr 2026
- 2025Prioritize Economy or Climate Action? Investigating ChatGPT Response Differences Based on Inferred Political Orientation4 Nov 2025
- 2025Beyond PII: How Users Attempt to Estimate and Mitigate Implicit LLM Inference15 Sep 2025
Similar, not cited
Close in wording, no citation either way
- 2024"Ghost of the past": identifying and resolving privacy leakage from LLM's memory through proactive user interaction
- 2024Undesirable Memorization in Large Language Models: A Survey
- 2025Assessing RAG and HyDE on 1B vs. 4B-Parameter Gemma LLMs for Personal Assistants Integretion
- 2024The Good and The Bad: Exploring Privacy Issues in Retrieval-Augmented Generation (RAG)
- 2026AIM: A Privacy-Aware Interoperable Memory Framework for Multi-Agent Multi-User LLM Systems
- 2025The Landscape of Memorization in LLMs: Mechanisms, Measurement, and Mitigation
- 2025Cognitive Workspace: Active Memory Management for LLMs -- An Empirical Study of Functional Infinite Context
- 2026Substrate Asymmetry in User-Side Memory: A Diagnostic Framework