Local Is Not a Sufficient Privacy Boundary: Governing OS-Integrated On-Device AI
Researchers present a comprehensive OS-centered privacy framework arguing that local AI processing alone does not guarantee privacy, as on-device models can still aggregate sensitive data, retain embeddings, invoke cloud services, and emit telemetry. The framework provides a threat model, risk taxonomy, and audit rubric, demonstrating that meaningful privacy depends on constrained information flow, bounded authority, and auditable governance rather than deployment location.

