Apple keeps logs of the phone numbers its users have contacted through its Message app, and may share them and other sensitive metadata with the police.
The Intercept received a document that explained every time a number is typed into the Messages app on an iPhone for a text conversation, the app contacts Apple’s servers to determine if the message should be sent via SMS or through Apple’s proprietary iMessage service. Each query is recorded by Apple, including the time and date the number was entered and the user’s IP address.
Other than the normal privacy concerns, the collection of this data is in direct contradiction to Apple’s claims that it does not store data relating to a person’s location, as the IP address is a good indication of where a person is.
The Cupertino company told The Intercept that it only retains the logs for a 30-day period, though court orders can force it to store the data for longer.
“When law enforcement presents us with a valid subpoena or court order, we provide the requested information if it is in our possession. Because iMessage is encrypted end-to-end, we do not have access to the contents of those communications,” Apple said in a statement.
“In some cases, we are able to provide data from server logs that are generated from customers accessing certain apps on their devices. We work closely with law enforcement to help them understand what we can provide and make clear these query logs don’t contain the contents of conversations or prove that any communication actually took place.”
Apple’s appearance of willingness to comply with such court orders seems to be in contradiction to the posturing it did over an FBI order to unlock the iPhone 5S belonging to San Bernardino gunman responsible for a terrorist attack last December.
The revelation comes at a time when Apple is shoring up its iOS encryption.
Can you protect your privacy online? Take our quiz!
After axing 31 percent of its workforce when it failed to be acquired by Amazon,…
Mozilla Foundation axes 30 percent of its staff, and is eliminating its Advocacy Division that…
Improving security. Mandatory multi-factor authentication (MFA) is coming to the Google Cloud by the end…
New AI assurance platform from UK government will help businesses ensure they can safely develop…
Protecting kids? Australian government confirms plan to implement restriction on social media for children under…
Canada ordered China's TikTok business in the country to be dissolved over national security risks,…