From Patient Burdens to User Agency: Designing for Real-Time Protection Support in Online Health Consultations
Open accessAbstract
Online medical consultation platforms, while convenient, are undermined by significant privacy risks that erode user trust. We first conducted in-depth semi-structured interviews with 12 users to understand their perceptions of security and privacy landscapes on online medical consultation platforms, as well as their practices, challenges and expectation. Our analysis reveals a critical disconnect between users' desires for anonymity and control, and platform realities that offload the responsibility of "privacy labor". To bridge this gap, we present SafeShare, an interaction technique that leverages localized LLM to redact consultations in real-time. SafeShare balances utility and privacy through selectively anonymize private information. A technical evaluation of SafeShare's core PII detection module on 3 dataset demonstrates high efficacy, achieving 89.64% accuracy with Qwen3-4B on IMCS21 dataset.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Increasing user control can potentially diminish the user's sense of agency.
“This approach, however, introduces a known trade-off: increasing user control can also increase cognitive load and privacy fatigue [8], potentially diminishing the user's sense of agency [42,43].”
From Understanding Users' Privacy Perceptions Towards LLM's RAG-based Memory (2025) · cites this paper as [43]
Cites
McDonald, N., Schoenebeck, S., & Forte, A. (2019) · Proceedings of the ACM on Human-Computer Interaction · doi:10.1145/3359174 · Cited by 1,206 · see citing works
Privacy as a Concept and a Social Issue: A Multidimensional Developmental Theory
Laufer, R. S., & Wolfe, M. (1977) · Journal of Social Issues · doi:10.1111/j.1540-4560.1977.tb01880.x · Cited by 993 · see citing works
The role of privacy fatigue in online privacy behavior
Choi, H., Park, J., & Jung, Y. (2018) · Computers in Human Behavior · doi:10.1016/j.chb.2017.12.001 · Cited by 427 · see citing works
Parker, L., Halter, V., Karliychuk, T., & Grundy, Q. (2019) · International Journal of Law and Psychiatry · doi:10.1016/j.ijlp.2019.04.002 · Cited by 129 · see citing works
Iwaya, L. H., Babar, M. A., Rashid, A., & Wijayarathna, C. (2023) · Empirical Software Engineering · doi:10.1007/s10664-022-10236-0 · Cited by 109 · see citing works
Online Access to Doctors' Notes: Patient Concerns About Privacy
Vodicka, E. L., Mejilla, R., Leveille, S. G., Ralston, J. D., Darer, J. D., Delbanco, T., Walker, J., & Elmore, J. G. (2013) · Journal of Medical Internet Research · doi:10.2196/jmir.2670 · Cited by 105 · see citing works
Jung, C., & Padman, R. (2014) · International Journal of Medical Informatics · doi:10.1016/j.ijmedinf.2014.08.004 · Cited by 57 · see citing works
Balancing Personal Privacy and Public Safety During COVID-19: The Case of South Korea
Ahn, N. Y., Park, J. E., Lee, D. H., & Hong, P. C. (2020) · IEEE Access · doi:10.1109/access.2020.3025971 · Cited by 45 · see citing works
Li, B., Gross, O., Crampton, N., Kapoor, M., Tauseef, S., Jain, M., Truong, K. N., & Mariakakis, A. T. (2024) · CHI Conference on Human Factors in Computing Systems · doi:10.1145/3613904.3641913 · Cited by 40 · see citing works
Exploring Large-Scale Language Models to Evaluate EEG-Based Multimodal Data for Mental Health
Hu, Y. '., Zhang, S., Dang, T., Jia, H. G., Salim, F. D., Hu, W. S., & Quigley, A. J. (2024) · ACM International Joint Conference on Pervasive and Ubiquitous Computing (UbiComp) · doi:10.1145/3675094.3678494 · Cited by 36 · see citing works
Self-citationProfessional Medical Advice at your Fingertips
Ma, X., Gui, X., Fan, J., Zhao, M., Chen, Y., & Zheng, K. (2018) · Proceedings of the ACM on Human-Computer Interaction · doi:10.1145/3274385 · Cited by 35 · see citing works
MedDG: An Entity-Centric Medical Consultation Dataset for Entity-Aware Medical Dialogue Generation
Liu, W., Tang, J., Yi, C. X., Li, W., Zheng, Y., & Liang, X. (2022) · Lecture notes in computer science · doi:10.1007/978-3-031-17120-8_35 · Cited by 34 · see citing works
Horstmann, S. A., Domiks, S., Gutfleisch, M., Tran, M., Acar, Y., Moonsamy, V., & Naiakshina, A. (2023) · Proceedings on Privacy Enhancing Technologies · doi:10.56553/popets-2024-0010 · Cited by 27 · see citing works
Kang, R. M., & Reynolds, T. L. (2024) · International Conference on Human Factors in Computing Systems · doi:10.1145/3613904.3642178 · Cited by 27 · see citing works
Mayer, C. J., Mahal, J., Geisel, D., Geiger, E. J., Staatz, E., Zappel, M., Lerch, S. P., Ehrenthal, J. C., Walter, S., & Ditzen, B. (2024) · Computers in Human Behavior · doi:10.1016/j.chb.2024.108419 · Cited by 26 · see citing works
Constraints and Workarounds to Support Clinical Consultations in Synchronous Text-based Platforms
Li, B., Skoropad, T., Seth, P., Jain, M., Truong, K. N., & Mariakakis, A. T. (2023) · CHI Conference on Human Factors in Computing Systems · doi:10.1145/3544548.3581014 · Cited by 17 · see citing works
Mendel, T., Nov, O., & Wiesenfeld, B. M. (2024) · Proceedings of the ACM on Human-Computer Interaction · doi:10.1145/3686925 · Cited by 17 · see citing works
Rescriber: Smaller-LLM-Powered User-Led Data Minimization for LLM-Based Chatbots
Zhou, J., Xu, E., Wu, Y., & Li, T. (2025) · Proceedings of the 2025 CHI Conference on Human Factors in Computing Systems · doi:10.1145/3706598.3713701 · Cited by 17 · see citing works
Yan, G., Pei, J., Ren, P., Ren, Z., Xin, X., Liang, H., de Rijke, M., & Chen, Z. (2022) · International ACM SIGIR Conference on Research and Development in Information Retrieval (SIGIR) · doi:10.1145/3477495.3531809 · Cited by 16 · see citing works
Privacy Preservation in Multi-Cloud Secure Data Fusion for Infectious-Disease Analysis
Liu, J., Zhang, C., Xue, K., & Fang, Y. M. (2022) · IEEE Transactions on Mobile Computing · doi:10.1109/tmc.2022.3145745 · Cited by 15 · see citing works
Li, B., Tauseef, S., Truong, K. N., & Mariakakis, A. T. (2025) · CHI Conference on Human Factors in Computing Systems · doi:10.1145/3706598.3713613 · Cited by 13 · see citing works
Yoo, D. W., Bhatnagar, A., Ernala, S. K., Ali, A. F., Birnbaum, M. L., Abowd, G. D., & Choudhury, M. D. (2023) · Proceedings of the ACM on Human-Computer Interaction · doi:10.1145/3579479 · Cited by 11 · see citing works
Lee, H., Jung, Y., Law, H. Y., Bae, S., & Lee, U. (2024) · CHI Conference on Human Factors in Computing Systems · doi:10.1145/3613904.3642815 · Cited by 11 · see citing works
Tazi, F., Dykstra, J., Rajivan, P., & Das, S. (2024) · CHI Conference on Human Factors in Computing Systems · doi:10.1145/3613904.3642208 · Cited by 8 · see citing works
Khoo, Y. X., Kang, R. M., Reynolds, T. L., & Mentis, H. M. (2024) · CHI Conference on Human Factors in Computing Systems · doi:10.1145/3613904.3642705 · Cited by 7 · see citing works
Klostermeyer, P., Klivan, S., Höltervennhoff, S., Krause, A., Busch, N., & Fahl, S. (2024) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3658644.3690190 · Cited by 5 · see citing works
PrivCAPTCHA: Interactive CAPTCHA to Facilitate Effective Comprehension of APP Privacy Policy
Zhang, S., Yi, X., Li, S., Xing, H., & Li, H. (2025) · CHI Conference on Human Factors in Computing Systems · doi:10.1145/3706598.3713928 · Cited by 5 · see citing works
Self-citationUnveiling Privacy Measures in Mental Health Applications
Hassan, M., & Bashir, M. N. (2023) · ACM International Joint Conference on Pervasive and Ubiquitous Computing (UbiComp) · doi:10.1145/3594739.3612879 · Cited by 4 · see citing works
Zhang, S., Ye, L., Yi, X., Tang, J., Shui, B., Xing, H., Liu, P., & Li, H. (2024) · arXiv · doi:10.48550/arxiv.2410.14931 · Cited by 4 · see citing works
Self-citationLi, Z., Wu, X., Jiang, H., & Liang, X. (2025) · Proceedings of the ACM on Human-Computer Interaction · doi:10.1145/3710940 · Cited by 2 · see citing works
Flagged first, then by citations
Cited by
Sorted by citations
Understanding Users' Privacy Perceptions Towards LLM's RAG-based Memory
Zhang, S., Ma, R., Ma, Y., Li, S., Xu, Y., Yi, X., & Li, H. (2025) · Proceedings of the 2025 Workshop on Human-Centered AI Privacy and Security · doi:10.1145/3733816.3760750 · Cited by 6 · see citing works
“This approach, however, introduces a known trade-off: increasing user control can also increase cognitive load and privacy fatigue [8], potentially diminishing the user’s sense of agency [42, 43].”
Self-citation
- Authors
- Zhang, S., Ma, Y., Hu, Y. '., Dang, T., Jia, H., Yi, X., & Li, H.
- Affiliations
- Tsinghua University (CN)
- The University of Melbourne (AU)
- National University of Singapore (SG)
- University of Auckland (NZ)
- Venue
- Companion of the 2025 ACM International Joint Conference on Pervasive and Ubiquitous Computing
- Publisher
- ACM
- Published
- 2025-10-12
- Pages
- 1597-1604
- OpenAlex
- W7117449007
- Cited by
- 0
- References
- 29
- FWCI
- 0.00
- Type
- conference paper
- Language
- en
- Open access
- hybrid
- doi.org
- Licence
- cc-by
- Locations
- ACM International Joint Conference on Pervasive and Ubiquitous Computing (UbiComp) (publishedVersion, cc-by)
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University) (cc-by)
- Topics
- Social Sciences › Sociology and Political Science › Privacy, Security, and Data Protection
- Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
- Health Sciences › Medicine › Public Health, Environmental and Occupational Health › Patient Dignity and Privacy
- Keywords
- online medical consultation, privacy, anonymity, personal information detection, user trust, health data protection
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review