The Personalization Mirage: How LLMs Fabricate User Profiles, and Why Self-Monitoring Misleads
Yushi Sun, Yanjie Zhang, Rui Sheng
cs.CL
Submitted: 2026-08-05
License: http://creativecommons.org/licenses/by/4.0/
The gist: Personalized LLMs with persistent memory are increasingly deployed, yet the faithfulness of their user models remains unexamined.
Terminology
Abstract
Personalized LLMs with persistent memory are increasingly deployed, yet the faithfulness of their user models remains unexamined. We study over-inference (OI): the phenomenon where LLMs fabricate user attributes beyond what evidence supports. We introduce MirageBench, comprising 150 personas balanced across stereotypical, counter-stereotypical, and neutral profiles, 6 personalization tasks spanning an ``imagination gradient'', a four-way faithfulness taxonomy operationalized by an independent judge (validated against a blind human annotator on 400 claims: Cohen's kappa = 0.863 four-class, kappa = 0.900 binary), and a leaderboard of 12 models across 7 families on 143616 judged claims. We find that over-inference is pervasive: every one of the 12 models over-infers 35%--49% of its claims (cross-model mean 41.6%; claim-weighted 41.8%), with no model in this evaluation escaping it. Most strikingly, we surface a Self-Monitoring Inversion: at the model-selection level, models' self-assessed OI is negatively rank-correlated with their judge-measured OI (rho = -0.60, p = 0.044; exploratory, wide bootstrap CI [-0.90, +0.06], n = 12). The models that report the least over-inference tend to be flagged as fabricating the most, so self-reported confidence is a misleading signal for comparing models, even though within a single model self-audit still ranks that model's own claims moderately well (AUROC 0.58--0.83). We further show that OI is task-dependent (27%--59%) and that, in a multi-turn pilot, inferred attributes accumulate approximately linearly with little revision. MirageBench positions external verification, rather than model self-report, as a more reliable foundation for trustworthy personalization.
Sources
- Recalling Too Well: Sycophancy Evaluation and Mitigation in Memory-Augmented Models
- STALE: Can LLM Agents Know When Their Memories Are No Longer Valid?
- Mind the Confidence Gap: Overconfidence, Calibration, and Distractor Effects in Large Language Models
- Mem0: Building Production-Ready AI Agents with Scalable Long-Term Memory
- DeepSeek-V4: Towards Highly Efficient Million-Token Context Intelligence
- OP-Bench: Benchmarking Over-Personalization for Memory-Augmented Personalized Conversational Agents
- Know Me, Respond to Me: Benchmarking LLMs for Dynamic User Profiling and Personalized Responses at Scale
- PersonaMem-v2: Towards Personalized Intelligence via Learning Implicit User Personas and Agentic Memory
- Emergent Introspective Awareness in Large Language Models
- PERMA: Benchmarking Personalized Memory Agents via Event-Driven Preference and Realistic Task Environments
- HalluDial: A Large-Scale Benchmark for Automatic Dialogue-Level Hallucination Evaluation
- How Implicit Bias Accumulates and Propagates in LLM Long-term Memory
- LLMs Know They're Wrong and Agree Anyway: The Shared Sycophancy-Lying Circuit
- Qwen3 Technical Report
- How RLHF Amplifies Sycophancy
- Introspection Adapters: Training LLMs to Report Their Learned Behaviors
- GRAVITY: Architecture-Agnostic Structured Anchoring for Long-Horizon Conversational Memory
- Are Large Language Models a Good Replacement of Taxonomies?
- Understanding the Role of User Profile in the Personalization of Large Language Models
- LongMemEval: Benchmarking Chat Assistants on Long-Term Interactive Memory
Related papers
- Exploring Solution Divergence and Its Effect on Large Language Model Problem Solving
- Ishigaki-IDS-Bench: A Benchmark for Generating Information Delivery Specification from BIM Information Requirements
- Subliminal Steering: Stronger Encoding of Hidden Signals
- MedStruct-S: A Benchmark for Key Discovery, Key-Conditioned QA and Semi-Structured Extraction from OCR Clinical Reports
- The End of Transformers? On Challenging Attention and the Rise of Sub-Quadratic Architectures
- Untangling the Mechanisms of Misleading Context in Medical Question Answering