Pith. sign in

REVIEW 22 cited by

Clio: Privacy-Preserving Insights into Real-World AI Use

Not yet reviewed by Pith; the record is open.

This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.

SPECIMEN: schema-true, not a live event

T0 review · schema-true

One-sentence machine reading of the paper's core claim.

pith:XXXXXXXX · record.json · timestamp

arxiv 2412.13678 v1 pith:4SSTXQAM submitted 2024-12-18 cs.CY cs.AIcs.CLcs.CRcs.LG

Clio: Privacy-Preserving Insights into Real-World AI Use

classification cs.CY cs.AIcs.CLcs.CRcs.LG
keywords clioconversationsclaudeinsightssystemsworldacrossassistants
verification ladder T0 review T1 audit T2 compute T3 formal T4 reserved
0 comments
read the original abstract

How are AI assistants being used in the real world? While model providers in theory have a window into this impact via their users' data, both privacy concerns and practical challenges have made analyzing this data difficult. To address these issues, we present Clio (Claude insights and observations), a privacy-preserving platform that uses AI assistants themselves to analyze and surface aggregated usage patterns across millions of conversations, without the need for human reviewers to read raw conversations. We validate this can be done with a high degree of accuracy and privacy by conducting extensive evaluations. We demonstrate Clio's usefulness in two broad ways. First, we share insights about how models are being used in the real world from one million Claude.ai Free and Pro conversations, ranging from providing advice on hairstyles to providing guidance on Git operations and concepts. We also identify the most common high-level use cases on Claude.ai (coding, writing, and research tasks) as well as patterns that differ across languages (e.g., conversations in Japanese discuss elder care and aging populations at higher-than-typical rates). Second, we use Clio to make our systems safer by identifying coordinated attempts to abuse our systems, monitoring for unknown unknowns during critical periods like launches of new capabilities or major world events, and improving our existing monitoring systems. We also discuss the limitations of our approach, as well as risks and ethical concerns. By enabling analysis of real-world AI usage, Clio provides a scalable platform for empirically grounded AI safety and governance.

discussion (0)

Sign in with ORCID, Apple, or X to comment. Anyone can read and Pith papers without signing in.

Forward citations

Cited by 22 Pith papers

Reviewed papers in the Pith corpus that reference this work. Sorted by Pith novelty score.

  1. Stateful Online Monitoring Catches Distributed Agent Attacks

    cs.CR 2026-05 unverdicted novelty 7.0

    A clustering-based stateful online monitor detects distributed multi-agent cyberattacks that evade standard per-transcript monitors, catching them 30% earlier in large-scale simulated traffic with low overhead.

  2. Deep Reasoning in General Purpose Agents via Structured Meta-Cognition

    cs.CL 2026-05 unverdicted novelty 7.0

    DOLORES, an agent using a formal language for meta-reasoning to construct adaptive scaffolds on the fly, outperforms prior scaffolding methods by 24.8% on average across four hard benchmarks and multiple model sizes.

  3. Priming, Path-dependence, and Plasticity: Understanding the molding of user-LLM interaction and its implications from (many) chat logs in the wild

    cs.HC 2026-05 unverdicted novelty 7.0

    Large-scale analysis of wild LLM chat logs finds that user interaction patterns stabilize quickly after initial use and correlate with long-term outcomes like retention, creating an agency paradox of limited explorati...

  4. Restoration, Exploration and Transformation: How Youth Engage Character.AI Chatbots for Feels, Fun and Finding themselves

    cs.HC 2026-03 unverdicted novelty 7.0

    Youth on Character.AI use chatbots for emotional restoration, creative exploration, and identity transformation, yielding a new three-intent framework and seven-archetype taxonomy from Discord discourse analysis.

  5. Task-Dependent Evaluation of LLM Output Homogenization: A Taxonomy-Guided Framework

    cs.CL 2025-09 conditional novelty 7.0

    Proposes a task taxonomy for functional diversity in LLM outputs, validates it via user study, introduces targeted sampling to boost diversity only where needed, and presents evidence that the diversity-quality tradeo...

  6. Evalet: Evaluating Large Language Models through Functional Fragmentation

    cs.HC 2025-09 conditional novelty 7.0

    Evalet applies functional fragmentation to deliver fragment-level qualitative analysis of LLM evaluations, with a user study showing 48% more misalignment detections than holistic scoring.

  7. Three Years of r/ChatGPT: Societal Impact Evaluations from Social Media Data

    cs.CY 2026-06 unverdicted novelty 6.0

    Longitudinal analysis of r/ChatGPT posts shows normalization of ChatGPT as an everyday tool alongside rising mental health and emotional attachment discussions after GPT-4o, with PuLSE detecting the latter trend months early.

  8. LLM Anonymization Against Agentic Re-Identification

    cs.CR 2026-05 unverdicted novelty 6.0

    AURA is an LLM mask-reconstruct anonymization method that improves resistance to agentic web-search re-identification on interview transcripts while retaining contextual utility.

  9. Adopt $\neq$ Adapt: Longitudinal Analyses of LLM Conversations in the Wild

    cs.AI 2026-05 unverdicted novelty 6.0

    Longitudinal analysis of Bing Copilot users shows sticky individual LLM habits, activity-level differences in task complexity and success, and that WildChat is skewed toward power users.

  10. SynAE: A Framework for Measuring the Quality of Synthetic Data for Tool-Calling Agent Evaluations

    cs.CL 2026-05 unverdicted novelty 6.0

    SynAE is a multi-metric framework that evaluates how well synthetic benchmarks replicate real data characteristics for multi-turn tool-calling agent testing.

  11. Going PLACES: Participatory Localized Red Teaming for Text-to-Image Safety in the Global South

    cs.CY 2026-05 unverdicted novelty 6.0

    A participatory red-teaming project in the Global South created the PLACES dataset of 26k T2I failure examples that reveal unique cultural and linguistic harms missed by existing safety frameworks.

  12. RECAP: An End-to-End Platform for Capturing, Replaying, and Analyzing AI-Assisted Programming Interactions

    cs.SE 2026-05 unverdicted novelty 6.0

    RECAP captures, replays, and analyzes AI-assisted programming sessions by linking prompts, edits, and developer actions in a single timeline.

  13. Who Defines "Best"? Towards Interactive, User-Defined Evaluation of LLM Leaderboards

    cs.AI 2026-04 unverdicted novelty 6.0

    Analysis of the LMArena dataset reveals heavy topic skew and varying model rankings, leading to an interactive visualization tool for users to define custom evaluation priorities on LLM leaderboards.

  14. COMPASS: COntinual Multilingual PEFT with Adaptive Semantic Sampling

    cs.LG 2026-04 unverdicted novelty 6.0

    COMPASS uses semantic clustering on multilingual embeddings to select auxiliary data for PEFT adapters, outperforming linguistic-similarity baselines on multilingual benchmarks while supporting continual adaptation.

  15. Behavior Latticing: Inferring User Motivations from Unstructured Interactions

    cs.HC 2026-04 unverdicted novelty 6.0

    Behavior latticing synthesizes connections across unstructured user interactions to generate insights into underlying motivations, yielding deeper and more accurate user understanding than task-only models.

  16. Language Model Goal Selection Differs from Humans' in a Self-Directed Learning Task

    cs.CL 2026-02 unverdicted novelty 6.0

    LLMs diverge from human goal selection in self-directed learning by exploiting single solutions with low variability across instances.

  17. Benchmarking Misuse Mitigation Against Covert Adversaries

    cs.CR 2025-06 unverdicted novelty 6.0

    Develops the BSD data generation pipeline and two new datasets to evaluate decomposition attacks as effective misuse enablers and stateful defenses as a countermeasure in language model safety.

  18. Can Large Language Models Really Recognize Your Name?

    cs.CR 2025-05 unverdicted novelty 6.0

    LLMs exhibit 20-40% lower recall on ambiguous human names for PII detection, worsening under prompt injections, as shown via the new AmBench benchmark.

  19. CRAFT: Clustering Rubrics to Diagnose Weak LLM Capabilities and Generate Targeted Fine-Tuning Data

    cs.AI 2026-07 conditional novelty 5.0

    Fine-tuning on weaknesses diagnosed at individual rubric-criterion level beats prompt-level and random data selection on most of 8 model×domain settings.

  20. A closer look at how large language models trust humans: patterns and biases

    cs.CL 2025-04 unverdicted novelty 5.0

    Across 43,200 simulations with five LLMs and five scenarios, model trust in humans aligns with human-like patterns driven by trustworthiness dimensions and is sometimes biased by age, gender, and religion.

  21. Reheat Nachos for Dinner? Evaluating AI Support for Cross-Cultural Communication of Neologisms

    cs.CL 2026-04 unverdicted novelty 4.0

    AI explanations of slang improve non-native speakers' writing competence more than definitions or rewrites according to native raters, but users overestimate their skill and a performance gap with natives remains.

  22. Position: Mind the Gap-AI Security and the Limits of Current Reporting Standards

    cs.CR 2024-12 unverdicted novelty 3.0

    Existing AI security incident reporting practices are misaligned with AI system characteristics, leaving key issues like IP treatment and vulnerability ownership unresolved and necessitating specialized standards as A...