mlsanityData to 14 Oct 2026

MemPrivacy: Privacy-Preserving Personalized Memory Management for Edge-Cloud Agents

arXiv 2605.09530 ↗First posted 10 May 2026cs.CR cs.CLcited by 7

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

As LLM-powered agents are increasingly deployed in edge-cloud environments, personalized memory has become a key enabler of long-term adaptation and user-centric interaction. However, cloud-assisted memory management exposes sensitive user information, while existing privacy protection methods typically rely on aggressive masking that removes task-relevant semantics and consequently degrades memory utility and personalization quality. To address this challenge, We propose MemPrivacy, which identifies privacy-sensitive spans on edge devices, replaces them with semantically structured type-aware placeholders for cloud-side memory processing, and restores the original values locally when needed. By decoupling privacy protection from semantic destruction, MemPrivacy minimizes sensitive data exposure while retaining the information required for effective memory formation and retrieval. We also construct MemPrivacy-Bench for systematic evaluation, a dataset covering 200 users and over 155k privacy instances, and introduce a four-level privacy taxonomy for configurable protection policies. Experiments show that MemPrivacy achieves strong performance in privacy information extraction, substantially surpassing strong general-purpose models such as GPT-5.2 and Gemini-3.1-Pro, while also reducing inference latency. Across multiple widely used memory systems, MemPrivacy limits utility loss to within 1.6%, outperforming baseline masking strategies. Overall, MemPrivacy offers an effective balance between privacy protection and personalized memory utility for edge-cloud agents, enabling secure, practical, and user-transparent deployment.

Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 36 of its 61 references that are in the map. First posted on arXiv 10 May 2026.

Builds on

36 of 61 references.

Closest ancestors · 3

Same direction, newest first

  1. 2025Unveiling Privacy Risks in LLM Agent Memory17 Feb
  2. 2025Firewalls to Secure Dynamic LLM Agentic Networks3 Feb
  3. 2024AirGapAgent: Protecting Privacy-Conscious Conversational Agents8 May

Other references · 33

  1. 2022Training language models to follow instructions with human feedbackcited by 15,971
  2. 2017Proximal Policy Optimization Algorithmscited by 15,215
  3. 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 9,379
  4. 2024LlamaFactory: Unified Efficient Fine-Tuning of 100+ Language Modelscited by 1,464
  5. 2019ZeRO: Memory Optimizations Toward Training Trillion Parameter Modelscited by 1,301
  6. 2025A-MEM: Agentic Memory for LLM Agentscited by 1,063
  7. 2023MemoryBank: Enhancing Large Language Models with Long-Term Memorycited by 556
  8. 2024Scaling Synthetic Data Creation with 1,000,000,000 Personascited by 417
  9. 2024SWIFT:A Scalable lightWeight Infrastructure for Fine-Tuningcited by 355
  10. 2025Memory in the Age of AI Agentscited by 303
  11. 2023Augmenting Language Models with Long-Term Memorycited by 189
  12. 2024PrivacyLens: Evaluating Privacy Norm Awareness of Language Models in Actioncited by 171
21 more
  1. 2023Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attackscited by 158
  2. 2025MemOS: A Memory OS for AI Systemcited by 138
  3. 2024Machine Unlearning of Pre-trained Large Language Modelscited by 119
  4. 2025PersonaMem-v2: Towards Personalized Intelligence via Learning Implicit User Personas and Agentic Memorycited by 88
  5. 2023Right to be Forgotten in the Era of Large Language Models: Implications, Challenges, and Solutionscited by 60
  6. 2025HaluMem: Evaluating Hallucinations in Memory Systems of Agentscited by 54
  7. 2024Mitigating the Privacy Issues in Retrieval-Augmented Generation (RAG) via Pure Synthetic Datacited by 52
  8. 2024Privacy-Preserving Retrieval-Augmented Generation with Differential Privacycited by 39
  9. 2023Deepfakes, Phrenology, Surveillance, and More! A Taxonomy of AI Privacy Riskscited by 31
  10. 2025CIMemories: A Compositional Benchmark for Contextual Integrity of Persistent Memory in LLMscited by 26
  11. 2026According to Me: Long-Term Personalized Referential Memory QAcited by 14
  12. 2025PrivacyBench: A Conversational Benchmark for Evaluating Privacy in Personalized AIcited by 12
  13. 2025PRISM: Privacy-Aware Routing for Adaptive Cloud-Edge LLM Inference via Semantic Sketch Collaborationcited by 10
  14. 2025LUNE: Efficient LLM Unlearning via LoRA Fine-Tuning with Negative Examplescited by 8
  15. 2025VortexPIA: Indirect Prompt Injection Attack against LLMs for Efficient Extraction of User Privacycited by 7
  16. 2025Understanding Users' Privacy Perceptions Towards LLM's RAG-based Memorycited by 6
  17. 2026MemReader: From Passive to Active Extraction for Long-Term Agent Memorycited by 3
  18. 2025SecP-Tuning: Efficient Privacy-Preserving Prompt Tuning for Large Language Models via MPCcited by 1
  19. 2025DPF-CM: A Data Processing Framework with Privacy-Preserving Vector Databases for Chinese Medical LLMs Training and Deploymentcited by 1
  20. 2025Whistledown: Combining User-Level Privacy with Conversational Coherence in LLMscited by 1
  21. 2026MemEmo: Evaluating Emotion in Memory Systems of Agentscited by 1

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 7.

7 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026What to Remember, What to Reveal: Privacy-Aware Memory for Conversational Agents
  2. 2026AIM: A Privacy-Aware Interoperable Memory Framework for Multi-Agent Multi-User LLM Systems
  3. 2026EP-Mem: Elastic Privacy Memory for Social Relationship-Aware LLM Agents
  4. 2026CIPL: A Channel-Aware Framework for Recoverable Privacy Leakage in LLM Agents
  5. 2026PAAC: Privacy-Aware Agentic Device-Cloud Collaboration
  6. 2026Beyond Similarity: Trustworthy Memory Search for Personal AI Agents
  7. 2026Kernel-Managed Shared Memory for System-Wide Personalization
  8. 2026BodhiPromptShield: Pre-Inference Prompt Mediation for Surface-Form Privacy Propagation in LLM Agent Pipelines