Encrypted data from a smartphone can reveal if a user is stressed or lonely just by the timing and shape of the data packets.
Traditional encryption protects the content of messages, but it does nothing to hide the behavioral patterns of the user. This research shows that the metadata of network traffic can detect psychological states like sleep quality and social isolation. These longitudinal signals act as a passive biometric that bypasses most privacy protections. Companies or malicious actors can monitor a user's mental health without ever seeing a single private photo or text. It suggests that our current definitions of digital privacy are fundamentally outdated for the age of behavioral AI.
From Packets to Patterns: Interpreting Encrypted Network Traffic as Longitudinal Behavioral Signals
arXiv · 2605.01616
Human behavior is difficult to observe continuously at scale, yet it leaves measurable traces in everyday device use. We test whether encrypted smartphone network traffic -- a ubiquitous, always-on, passive sensing modality -- can passively capture behavioral patterns related to sleep, stress, and loneliness. We model shared behavioral structure using a transformer backbone with per-user adapters, allowing the model to represent both typical individual behavior and deviations from it. To make th