Personalization you can control. Adapt through consented context with explanations and control.
Use only consented context.
Show every adaptive input.
Explain why the system changed.
Offer a working off switch.
Adaptation should remain inspectable.