When we delete something, we tend to believe we have unmade it — but memory, both human and digital, rarely surrenders its traces so cleanly. Researchers at Georgia Tech have built a tool called ORISA that recovers deleted AI conversations from Android phones, reconstructing them into working sessions and sometimes surfacing information the AI itself had already set aside. The work, presented at the 2026 IEEE Symposium on Security and Privacy, reveals a quiet gap between what users believe deletion means and what actually persists in the layered strata of a phone's working memory. In choosing
Deleted AI Chats Leave Recoverable Traces in Phone Memory, Georgia Tech Study Finds
Deletion may not mean erasure for local AI conversations
Mark
So ORISA can recover conversations I thought I deleted. How long does that window stay open?
Mimi
It depends on how much other activity happens on your phone. The more apps you use, the more files you create, the faster that memory gets overwritten. But there's definitely a window where recovery is possible.
Luke
How wide is that window? Hours? Days? The article doesn't say, and that matters for understanding the actual risk.
Mimi
Fair point. The researchers tested it in controlled conditions, but real-world timing would depend on individual phone usage patterns.
Mark
Why does this matter for investigators?
Mimi
If someone deletes a conversation with an AI assistant, investigators can now potentially recover what was discussed and what advice or information the AI provided. It's a new forensic avenue.
Luke
But we should be clear: this only works for local AI assistants, not cloud-based ones. And it only works while data is still in memory. Once that memory is overwritten, it's gone.
Mark
What about privacy? Should people be worried?
Mimi
If you're using a local AI assistant thinking your conversations are private once deleted, this research shows that's not necessarily true. The data can persist in your phone's memory.
Luke
Though it's worth noting this requires physical access to the phone and specialized forensic tools. It's not like anyone can do this remotely.
Mark
So the real question is: who has access to your phone and what tools do they have?
Mimi
Exactly. For most people, the risk is law enforcement or someone with forensic expertise. For others, it might be less of a concern.
Luke
And we don't know yet how widespread this vulnerability is across different AI models and apps. They tested 10 apps and 3 models, but there are many more out there.
Der Puls
- Users who delete AI conversations on their phones are operating under a false sense of erasure — the data lingers in memory, waiting to be found.
- ORISA, developed at Georgia Tech, can not only recover those deleted fragments but reassemble them into a fully functional AI session, sometimes retrieving more than the original session still held.
- In a controlled test, a reconstructed AI session recalled 26 facts from a deleted conversation while the still-running original could only access 14 — the deleted version outperformed the live one.
- The tool was validated across 10 Android apps, three AI models, and 60 test configurations, suggesting this is not an edge case but a systemic vulnerability in how local AI assistants handle memory.
- The window for recovery narrows as new phone activity overwrites old memory, but it remains open long enough to matter for investigators — and for anyone whose private conversations they might seek.
- People who chose local AI precisely to avoid cloud surveillance now face evidence that deletion is not erasure, reshaping the privacy calculus around on-device AI entirely.
When we delete something, we tend to believe we have unmade it — but memory, both human and digital, rarely surrenders its traces so cleanly. Researchers at Georgia Tech have built a tool called ORISA that recovers deleted AI conversations from Android phones, reconstructing them into working sessions and sometimes surfacing information the AI itself had already set aside. The work, presented at the 2026 IEEE Symposium on Security and Privacy, reveals a quiet gap between what users believe deletion means and what actually persists in the layered strata of a phone's working memory. In choosing local AI assistants for privacy, many users may have traded one vulnerability for another they could not see.
When you delete a conversation with an AI assistant on your phone, you likely assume it is gone. Researchers at Georgia Tech have found that assumption does not hold. Their tool, ORISA, can reach into an Android phone's working memory, recover fragments of deleted AI chats, and reconstruct them into functional sessions — sometimes retrieving information the AI itself had already cycled out of active use.
The tool targets local AI assistants, which run directly on the device rather than routing conversations through cloud servers. While these assistants operate, traces of deleted conversations persist in the phone's memory. ORISA searches that space, gathers recoverable pieces, and rebuilds a working session from them.
To test this, the team created a fictional assistant using the ChatterUI app, fed it 100 invented facts, then deleted the conversation. When ORISA reconstructed a new session from the recovered data, it could retrieve 26 of those facts. The original, still-running session could only access 14. The deleted version, in a meaningful sense, remembered more.
The researchers tested ORISA across 10 Android apps, three AI models, and 60 configurations — and recovered conversation data in every case. Lead author Ken Xu noted the findings open a new avenue for digital forensics investigators, while simultaneously exposing an unexpected vulnerability for ordinary users. The research was presented at the 2026 IEEE Symposium on Security and Privacy.
The recovery window does close. As new activity overwrites old memory, deleted conversations become harder to reach. But the gap between deletion and true erasure remains open long enough to matter. For users who chose local AI assistants specifically to keep conversations private, the findings reframe what privacy on-device actually means.
When you delete a conversation with an artificial intelligence assistant on your phone, you might assume it vanishes completely. Researchers at Georgia Tech have discovered that assumption is wrong. A new tool called ORISA can pull deleted AI chats back out of a phone's memory and even reconstruct them into working sessions—sometimes recovering information the AI itself had already stopped actively tracking.
The tool works on Android devices running local AI assistants, which operate directly on the phone rather than sending conversations to cloud servers. While these assistants are running, fragments of deleted conversations linger in the phone's working memory. ORISA searches through that memory space for recoverable pieces, then reassembles them into a functional AI session.
To test the concept, researchers built a fictional AI assistant called "Project Note Keeper" using the ChatterUI Android app and fed it 100 fictional facts about a project. They then deleted the conversation. When ORISA recovered the deleted data and reconstructed a new session, the restored assistant could retrieve 26 of those facts. The original session, still running, could only access 14 of them—the rest had already cycled out of active memory. The experiment demonstrated that ORISA could recover information even after the AI had moved past it.
The team tested ORISA across 10 different Android apps and three separate AI models, running 60 different test configurations. Across all of them, the tool successfully recovered conversation data that remained somewhere in the phone's memory. Ken Xu, a Ph.D. student and lead author of the study, noted that the findings could help investigators establish what information someone shared with an AI assistant and what responses they received. The implications cut both ways: law enforcement and digital forensics teams gain a new investigative avenue, while ordinary users face an unexpected privacy vulnerability.
The challenge for recovery diminishes over time. As a phone's memory gets overwritten by new activity—apps opening, files being created, other processes running—the traces of deleted conversations become progressively harder to retrieve. But the window remains open long enough to matter. The research was presented at the 2026 IEEE Symposium on Security and Privacy under the title "Recovering and Rehosting Mobile Local LLM Conversations and Contexts via Memory Forensics." The work involved Ph.D. students Xu, David Oygenblik, Runze Zhang, and Mingxuan Yao; Research Scientist Muhammad Ibrahim; and Associate Professor Brendan Saltaformaggio, all based in Georgia Tech's Cyber Forensics Innovation Laboratory, a joint effort between the School of Cybersecurity and Privacy and the School of Electrical and Computer Engineering.
The findings expose a gap between user expectation and technical reality. People who choose local AI assistants partly for privacy reasons—keeping conversations off cloud servers—now face evidence that deletion may not mean erasure. As local AI assistants become more common on phones, the question of what happens to deleted conversations will likely become more urgent.
Bemerkenswerte Zitate
It can help establish what information someone shared with an AI assistant and what assistance they received— Ken Xu, Ph.D. student and lead author of the study
Möchten Sie die ganze Geschichte?
Das Original lesen bei Newswise ↗