Source-linked AI summary
Who Acts When the User Is Gone? Digital Remains, Survivor Claims, and Post-Mortem Governance
Supriya Khadka, Dhiman Goswami, Sanchari Das
TL;DR
After an account holder dies, digital systems continue to operate while survivors must manage access, preservation, closure, and protection without the user. This paper analyzes Reddit posts to map the actors, claims, and barriers involved, finding that devices can gate access to other remains and data loss is a central harm. It proposes a governance framework for coordinating survivor responses while limiting access by purpose, asset, actor, and context.
Problem
Systems continue to require user authentication, consent, recovery approval, or clarification of intent after the account holder can no longer act.
Source: §1 · p. 1Method
Results
Phones and devices often gate access to other digital remains, socially connected actors make varied claims that may conflict, and data loss emerges as the dominant risk.
Source: §4.1 · p. 3, §4.2 · p. 3, §4.3 · p. 3Takeaways & Limitations
Abstract
from arXiv · showhide
Digital systems continue to govern accounts, devices, data, and recovery channels after an account holder dies, leaving survivors to manage digital remains through mechanisms built around a living user. We examine post-mortem digital governance as a sociotechnical problem of cooperative and contested work, focusing on who acts when the user is gone, what claims they make, and what barriers shape recovery, preservation, closure, and protection. We conducted a content analysis of $800$ Reddit posts about post-mortem digital privacy and security, coding posts across assets, actors, actions, privacy tensions, access barriers, policy gaps, emotional contexts, and risks. Findings show that phones/devices often act as gateways to other digital remains, socially connected actors make most claims, and data loss emerges as a central harm. We synthesize these findings into a Post-Mortem Digital Governance Framework for designing mechanisms that support survivor coordination while limiting access by purpose, asset, actor, and context.
1 Introduction
After an account holder dies, digital systems continue operating without the user they rely on, leaving survivors to navigate access, preservation, closure, and protection. The paper frames this work as post-mortem digital governance and examines which assets, actors, claims, and barriers shape it.
1 Introduction
- A locked phone may hold photos, messages, or recovery codes, while profiles and accounts remain subject to platform policies and procedures [27].Survivors may seek access, preservation, closure, or protection across devices, accounts, data, and recovery channels.Source: §1 · p. 1
- Post-user security describes security and privacy problems that arise when digital systems continue operating after the account holder can no longer act.Systems may still expect authentication, consent, objections, and clarification of intent from someone who cannot provide them.Source: §1 · p. 1
- Survivors’ work is cooperative and contested because social responsibility, legal authority, technical access, and platform policy may not align.Families, partners, friends, executors, and other affected actors must navigate relationships, platform rules, legal procedures, institutions, and technical recovery mechanisms [19].Source: §1 · p. 1
- The paper analyzes 800 Reddit posts and introduces a framework spanning digital remains, claiming actors, actions, governance tensions, access barriers, policy gaps, emotional context, and risk.The framework treats post-mortem digital privacy and security as a governance problem.Source: §1 · p. 2
2 Background: Digital Remains and Post-Mortem Governance
Prior work establishes the social, emotional, legal, and economic significance of digital data after death. This paper focuses on operational breakdowns and the distributed work through which survivors and institutions manage digital remains.
2 Background: Digital Remains and Post-Mortem Governance
- Prior CSCW and HCI research examines memorial profiles, personal archives, inheritance, estate management, and medical or genetic records [22].This work identifies tensions between heir access and deceased privacy, legal authority and platform terms, and individual autonomy and family benefit.Source: §2 · p. 2
- The paper shifts attention to operational breakdowns when users can no longer authenticate, reset credentials, approve recovery, appeal decisions, or clarify intent.Relevant tasks include recovering photos, closing accounts, exporting files, preserving evidence, preventing fraud, memorializing profiles, and planning disclosure.Source: §2 · p. 2
- Post-mortem governance involves distributed work among relatives, friends, partners, executors, platforms, legal institutions, and financial services, amid grief, uncertainty, incomplete authority, missing credentials, and conflicting privacy expectations.The paper treats digital remains as objects around which social and institutional work is organized.Source: §2 · p. 2
3 Method
The study uses qualitative content analysis of public Reddit posts to characterize recurring post-mortem digital governance patterns. It combines manual screening and coding with descriptive frequency analysis and reports findings only in aggregate.
3 Method
- The researchers selected ten subreddits for topical relevance and searched for mortality-related and digital-account terms, producing 3,990 candidate posts.The corpus was treated as a source of recurring sociotechnical patterns rather than a representative sample; smaller communities contributed fewer posts.Source: §3 · p. 2
- Manual screening yielded 800 relevant posts from 2009–2026, coded across assets, actors, desired actions, privacy tensions, barriers, policy gaps, emotional context, and risks.Coding combined research-question categories with inductive refinement; one researcher coded the corpus, and a second reviewed the codebook before coding began.Source: §3 · p. 2
- The researchers used descriptive frequencies to characterize corpus patterns, not to estimate population-level prevalence.They omitted usernames, reported results in aggregate, withheld raw posts and identifiers, and paraphrased examples to reduce searchability and re-identification risk.Source: §3 · p. 2
4 Findings
The findings trace post-mortem governance from devices and socially connected actors to competing claims, harms, and fragmented systems. Across these areas, access and recovery depend on coordination among survivors, platforms, and institutions.
4.1 Digital remains span devices, accounts, and records
- Phones and devices were the most common digital asset and often served as gateways to other remains, with authentication apps and saved credentials upstream of accounts they unlock.A locked device could trigger downstream account failures before platform processes became available; device-related posts most often sought access and recovery, with data loss as the dominant risk.Source: §4.1 · p. 3
4.2 Post-mortem claims come from socially connected actors
- People with social or practical ties to the deceased commonly acted, while executors or legal representatives appeared in only a small share of posts.Their practical, emotional, protective, and evidentiary claims could collide, such as a child seeking closure while a partner sought to preserve messages; formal roles alone do not capture these competing purposes.Source: §4.2 · p. 3
4.3 Data loss is a central post-mortem harm
- Data loss was the dominant risk, including inaccessible photos or messages, failed account recovery, unmanaged accounts, and records that could not be preserved.The findings broaden post-mortem harm beyond confidentiality failures to include permanent loss, blocked preservation, unresolved obligations, and failed evidence protection; access must still be limited to reduce privacy and abuse risks.Source: §4.3 · p. 3
4.4 Governance gaps are fragmented across systems
- The most common policy gap was unsupported device access, followed by gaps in planning, platform processes, fraud response, platform responsiveness, and legal certainty.Tasks often depended on sequential access across people, devices, platforms, and institutions, so failure at one step could block later tasks; one account setting or platform policy cannot resolve these dependencies.Source: §4.4 · p. 3
5 Post-Mortem Digital Governance Framework
The Post-Mortem Digital Governance Framework treats post-mortem governance as cooperative work around digital remains and commits to responses tailored by purpose, asset, actor, and context.
5 Post-Mortem Digital Governance Framework
- The framework treats governance as cooperative work around digital remains, with emotional context and risk cutting across its dimensions.It identifies coordination breakdowns between assets and actions, social relationships and formal authority, emotional stakes and institutional procedures, and access barriers and policy support.Source: §5 · p. 3, Figure 1 · p. 4
- Governance should be purpose-limited, asset-specific, actor-sensitive, and context-aware, distinguishing actions, assets, claimants, and circumstances.Actions include read-only review, data export, account closure, fraud freeze, evidence preservation, memorialization, and trusted-contact notification; each names a beneficiary.Source: §5 · pp. 3–4
- Different assets, actors, and circumstances call for different support and scrutiny rather than a single post-mortem response.A phone, cloud archive, social media profile, financial account, or private message thread can raise different risks; claimants may include legal representatives, designated contacts, children, partners, friends, or suspicious actors.Source: §5 · p. 4
6 Discussion and Implications
Post-user security exposes a governance gap when systems persist after the user can no longer participate. Addressing it requires coordination across actors with uneven authority and knowledge, plus cautious fallback pathways when planning or access is absent.
6 Discussion and Implications
- Post-user security stress-tests account-centric security because systems persist while the person they serve can no longer participate in decisions.This creates a governance gap between persistent systems and the absent user.Source: §6 · p. 4
- Survivors face operational breakdowns before care, stewardship, or transfer can begin, with responsibility and access distributed across relatives, platforms, and institutions.These actors have uneven authority and knowledge, so governance must support coordination rather than account recovery alone.Source: §6 · p. 4
- Planning tools can reduce uncertainty but cannot address every case, making cautious fallback pathways important when plans or recovery channels are absent.Suggested mechanisms include document-based review, limited-purpose requests, preservation holds, fraud freezes, delayed disclosure, logging, review, and appeal, while reducing risks of surveillance, coercion, family conflict, and opportunistic takeover.Source: §6 · p. 4
7 Conclusion
An analysis of 800 Reddit posts examines post-mortem digital privacy and security across devices, accounts, records, relationships, and institutions. It introduces post-user security and a framework for coordinated responses tailored by purpose, asset, actor, and context.
7 Conclusion
- The analysis of 800 Reddit posts finds post-mortem privacy and security problems span devices, accounts, records, relationships, and institutions.The study frames these problems as arising when digital systems outlast the user's ability to act.Source: §7 · p. 4
- Post-user security names security and privacy problems that emerge when digital systems outlast the user's ability to act.The paper offers a Post-Mortem Digital Governance Framework for designing purpose-limited, asset-specific, actor-sensitive, and context-aware responses.Source: §7 · p. 4
- Post-mortem governance should support coordinated work across survivors, platforms, and institutions while protecting the deceased, survivors, and third parties.Source: §7 · p. 4