conv.

All stories
AIQuiet 7d · day 13

OpenAI's Project Lily uses contractors to review real ChatGPT conversations

Hundreds of outside contractors access anonymized user chats and memory summaries to score ChatGPT responses, raising privacy concerns.

What to know

  • OpenAI operates Project Lily, a contractor review program where hundreds of outside workers read and score real ChatGPT conversations to improve model responses.
  • Conversations are filtered to remove identifiers before contractor access, but OpenAI acknowledges its Privacy Filter is imperfect and can miss uncommon personal identifiers or fail to redact context that could re-identify users.
  • The program highlights a core tension: ChatGPT's usefulness depends on retaining personal context, while privacy protection requires removing that same context—a tension made explicit by contractor access to user memory summaries.

“OpenAI is using hundreds of outside contractors to read and evaluate real ChatGPT conversations, including chats containing sensitive personal information, according to a 404 Media investigation published September 14th.”

RuntimeWire (reporting 404 Media investigation), Outlet reporting on investigation · RuntimeWire ↗ · Sep 13

OpenAI AI company operating Project Lily404 Media Investigative outlet

OpenAI's Project Lily uses contractors to review real ChatGPT conversations
runtimewire.com

How it unfolded 2 developments, newest first · click a bar or a number to jump articlesposts

Peak 1 piece in 3h at Sep 14, 11 AM; 3 pieces over 13 days (1 article · 2 posts) Sep 14, 11 AM — 1 piece · 1 article — Newswires 1Sep 14, 2 PM — quietSep 14, 5 PM — quietSep 14, 8 PM — quietSep 14, 11 PM — quietSep 15, 2 AM — quietSep 15, 5 AM — quietSep 15, 8 AM — quietSep 15, 11 AM — quietSep 15, 2 PM — quietSep 15, 5 PM — quietSep 15, 8 PM — quietSep 15, 11 PM — quietSep 16, 2 AM — quietSep 16, 5 AM — quietSep 16, 8 AM — quietSep 16, 11 AM — quietSep 16, 2 PM — quietSep 16, 5 PM — quietSep 16, 8 PM — quietSep 16, 11 PM — quietSep 17, 2 AM — quietSep 17, 5 AM — quietSep 17, 8 AM — 1 piece · 1 post — Hacker News 1Sep 17, 11 AM — quietSep 17, 2 PM — quietSep 17, 5 PM — quietSep 17, 8 PM — quietSep 17, 11 PM — quietSep 18, 2 AM — quietSep 18, 5 AM — quietSep 18, 8 AM — quietSep 18, 11 AM — quietSep 18, 2 PM — quietSep 18, 5 PM — quietSep 18, 8 PM — quietSep 18, 11 PM — quietSep 19, 2 AM — quietSep 19, 5 AM — quietSep 19, 8 AM — quietSep 19, 11 AM — quietSep 19, 2 PM — quietSep 19, 5 PM — quietSep 19, 8 PM — quietSep 19, 11 PM — quietSep 20, 2 AM — quietSep 20, 5 AM — quietSep 20, 8 AM — quietSep 20, 11 AM — quietSep 20, 2 PM — quietSep 20, 5 PM — quietSep 20, 8 PM — quietSep 20, 11 PM — quietSep 21, 2 AM — quietSep 21, 5 AM — 1 piece · 1 post — Hacker News 1Sep 21, 8 AM — quietSep 21, 11 AM — quietSep 21, 2 PM — quietSep 21, 5 PM — quietSep 21, 8 PM — quietSep 21, 11 PM — quietSep 22, 2 AM — quietSep 22, 5 AM — quietSep 22, 8 AM — quietSep 22, 11 AM — quietSep 22, 2 PM — quietSep 22, 5 PM — quietSep 22, 8 PM — quietSep 22, 11 PM — quietSep 23, 2 AM — quietSep 23, 5 AM — quietSep 23, 8 AM — quietSep 23, 11 AM — quietSep 23, 2 PM — quietSep 23, 5 PM — quietSep 23, 8 PM — quietSep 23, 11 PM — quietSep 24, 2 AM — quietSep 24, 5 AM — quietSep 24, 8 AM — quietSep 24, 11 AM — quietSep 24, 2 PM — quietSep 24, 5 PM — quietSep 24, 8 PM — quietSep 24, 11 PM — quietSep 25, 2 AM — quietSep 25, 5 AM — quietSep 25, 8 AM — quietSep 25, 11 AM — quietSep 25, 2 PM — quietSep 25, 5 PM — quietSep 25, 8 PM — quietSep 25, 11 PM — quietYesterday, 2 AM — quietYesterday, 5 AM — quietYesterday, 8 AM — quietYesterday, 11 AM — quietYesterday, 2 PM — quietYesterday, 5 PM — quietYesterday, 8 PM — quietYesterday, 11 PM — quietToday, 2 AM — quietToday, 5 AM — quietToday, 8 AM — quietToday, 11 AM — quietToday, 2 PM — quietToday, 5 PM — quiet 12
Sep 15Sep 16Sep 17Sep 18Sep 19Sep 20Sep 21Sep 22Sep 23Sep 24Sep 25now · 7:55 PM ET
  1. 2

    YouTube video published on Project Lily details

    A video titled "Inside OpenAI's Project Lily" was posted to Hacker News, suggesting further coverage or analysis of the contractor review program has surfaced.

  2. 2 days quiet
  3. 1

    404 Media reports on Project Lily contractor review process

    A 404 Media investigation reveals OpenAI uses hundreds of outside contractors to read and evaluate real ChatGPT conversations, including sensitive personal information. The work is identified by the internal codename "Project Lily." Contractors access anonymized prompts, sometimes entire conversations, and user memory summaries containing location information and retained context about users.

    “ChatGPT's polished responses depend partly on contractors reviewing real conversations, creating a privacy boundary many users will encounter only after opening the settings menu.”
    — RuntimeWire (404 Media investigation)
    1. first by RuntimeWire, 13d ago

  4. background

    Contractor scoring methodology detailed in leaked guidelines — Leaked guides show reviewers score ChatGPT responses on a scale of one to seven after summarizing the user's intent and comparing four model outputs. Contractors are instructed to grade for accuracy, usefulness, length, style, and tone-matching. The default-on pipeline retains conversations for model improvement and can retain old chats even after users opt out.

  5. background

    Privacy Filter limitations documented in OpenAI materials — OpenAI's own technical description reveals the Privacy Filter used to redact conversations before contractor review is imperfect: it can miss uncommon identifiers or ambiguous private references and can over-redact or under-redact text when context is limited. Removing an account name does not necessarily make a conversation anonymous when medical history, workplace details, addresses, or family information remain in the text.