Privacy Without Losing Place: A Paradigm for Private Retrieval in Spatial RAGs

Fuente: arXiv
Enregistré dans:
Détails bibliographiques
Auteurs principaux: Edemacu, Kennedy, Shokri, Mohammad Mahdi, Shashidhar, Vinay M., Kim, Jong Wook
Format: Preprint
Publié: 2026
Sujets:
Accès en ligne:
Tags: Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
_version_ 1866915986719899648
author Edemacu, Kennedy
Shokri, Mohammad Mahdi
Shashidhar, Vinay M.
Kim, Jong Wook
author_facet Edemacu, Kennedy
Shokri, Mohammad Mahdi
Shashidhar, Vinay M.
Kim, Jong Wook
contents This work introduces PAS -- Privacy Anchor Substitution, a structured mechanism for enabling user location privacy in spatial retrieval-augmented generation (RAG) systems. Unlike conventional differential privacy methods that directly perturb user locations, PAS represents location with relative anchor encoding consisting of an anchor, direction bin, and distance bin, allowing seamless integration with modern RAG pipelines. We evaluate PAS on a synthetic urban dataset and show that it achieves impressive coarse privacy guarantees, with approximately 370-400m adversarial location error, while retaining more than half of the baseline retrieval performance. Despite the slight drop in retrieval performance, the downstream generation quality under PAS remains comparatively robust, indicating that large language models can compensate for imperfect spatial retrieval. Furthermore, we provide empirical analysis showing that PAS exhibits non-monotonic privacy-utility relationship with respect to privacy parameters. We attribute this to geometric bias induced by anchor discretization, making it different from continuous noise mechanisms such as geo-indistinguishability. Our results show that structured spatial representations offer a practical approach to privacy in location based reasoning in RAG systems.
format Preprint
id arxiv_https___arxiv_org_abs_2605_05459
institution arXiv
publishDate 2026
record_format arxiv
spellingShingle Privacy Without Losing Place: A Paradigm for Private Retrieval in Spatial RAGs
Edemacu, Kennedy
Shokri, Mohammad Mahdi
Shashidhar, Vinay M.
Kim, Jong Wook
Cryptography and Security
Machine Learning
This work introduces PAS -- Privacy Anchor Substitution, a structured mechanism for enabling user location privacy in spatial retrieval-augmented generation (RAG) systems. Unlike conventional differential privacy methods that directly perturb user locations, PAS represents location with relative anchor encoding consisting of an anchor, direction bin, and distance bin, allowing seamless integration with modern RAG pipelines. We evaluate PAS on a synthetic urban dataset and show that it achieves impressive coarse privacy guarantees, with approximately 370-400m adversarial location error, while retaining more than half of the baseline retrieval performance. Despite the slight drop in retrieval performance, the downstream generation quality under PAS remains comparatively robust, indicating that large language models can compensate for imperfect spatial retrieval. Furthermore, we provide empirical analysis showing that PAS exhibits non-monotonic privacy-utility relationship with respect to privacy parameters. We attribute this to geometric bias induced by anchor discretization, making it different from continuous noise mechanisms such as geo-indistinguishability. Our results show that structured spatial representations offer a practical approach to privacy in location based reasoning in RAG systems.
title Privacy Without Losing Place: A Paradigm for Private Retrieval in Spatial RAGs
topic Cryptography and Security
Machine Learning
url https://arxiv.org/abs/2605.05459