OpenAI Contractors Manually Review Real User Chats in Project Lily

OpenAI has engaged hundreds of external contractors to analyze actual user conversations with ChatGPT as part of its model improvement efforts. The reviewers, working under project Lily, examine real queries that may contain personal, medical, or other sensitive information despite the use of a Privacy Filter. Contractors summarize prompts, compare four model responses, and assign ratings from one to seven while flagging behaviors such as excessive sycophancy or inappropriate emojis. User identities are hidden and some data is filtered, yet OpenAI acknowledged that not all personal information is reliably removed. The same human review process is also employed by Anthropic for its Claude model. Users can opt out of future training use through account settings, although prior data remains unaffected.

AntiMalwareTranslated from Russian

Read at source

OpenAI has recruited hundreds of third-party contractors to manually review real user dialogues with ChatGPT. The work forms part of project Lily and gives reviewers direct access to prompts and responses that may include personal, medical, or other confidential details.

Reviewers are tasked with briefly summarizing each user query, comparing four model-generated answers, and scoring them on a scale from one to seven. They also flag issues such as excessive sycophancy, attempts by the model to appear human, and inappropriate use of emojis.

Although account names are masked and conversations pass through a Privacy Filter, OpenAI confirmed to 404 Media that the filter does not always remove all personal data. Reviewers may additionally see blocks of user memories containing prior conversation context and approximate location information.

Contractors are hired through external firms including Crossing Hurdles and Mercor, with some specialists earning more than $50 per hour. A similar human-evaluation process is used by Anthropic for conversations with Claude.

Under OpenAI policy, chats from personal plans may be used to improve models. Users can disable this by navigating to Settings → Data Controls and turning off the “Improve the model for everyone” option. The setting applies account-wide but does not retroactively remove previously processed data. Temporary chats are excluded from training, though they may still be reviewed for abuse detection.

Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in Privacy & Surveillance

Maximizing iPhone Privacy: Essential Settings to Enable, Disable, and Verify Immediately
Top 10 Secure DNS Servers for Privacy, Threat Blocking and Ad Filtering in 2026
WebRTC IP Leaks Explained: Why Disabling the Protocol Harms Anonymity in Anti-Detect Browsers