Apple forces other companies to ask permission before tracking you, but exempts its own advertising from the same rule. Apple's ad business boomed after ATT because it kept access to data it denied to competitors. The privacy feature doubles as a competitive weapon. Apple says your data is encrypted and safe. But by default, Apple keeps a copy of the key to your iCloud backups — and they hand that data to police when asked. They even dropped plans to fix this because the FBI objected. Most people never turn on the stronger protection.
What they claim: Apple states "Privacy is built into every Apple product from the beginning." Positions itself as the company that refuses to build backdoors (San Bernardino 2016).
What we found: Aug 2021: Apple announced NeuralHash CSAM client-side scanning for every iPhone/iPad. 90+ groups condemned it. Matthew Green (Johns Hopkins) warned of abuse. Snowden called it "spyPhone." Apple abandoned the plan but demonstrated willingness to build on-device surveillance infrastructure.
What they claim: iOS security guide: microphone indicator (orange dot) appears "whenever an app accesses the microphone" for "real-time awareness." Marketed as core privacy protection.
What we found: CVE-2024-44207 (fixed iOS 18.0.1): Audio messages captured seconds of audio BEFORE indicator appeared. CVE-2022-32946: apps could record via AirPods without mic permission. Apple's audio privacy guarantees breached multiple times.
What they claim: Apple's privacy page states "At Apple, we believe privacy is a fundamental human right." App Tracking Transparency requires all third-party apps to request permission before tracking users.
What we found: Apple Search Ads is exempt from the ATT prompt because Apple classifies its own tracking as "first-party." Apple's ad revenue grew 238% post-ATT (Financial Times, Oct 2022). Apple collects App Store search queries, tap behavior, ad views, and session data to serve targeted ads.
What they claim: Apple states "your data is protected by encryption" and "Apple leads the industry in security innovations." Marketing suggests your data is safe from everyone, including Apple.
What we found: Standard Data Protection (the default) means Apple holds encryption keys for iCloud Backups, Photos, Notes, iCloud Drive. Reuters (Jan 2020): Apple dropped E2E backup encryption plans after FBI pressure. Advanced Data Protection opt-in since Dec 2022, most users never enable it.
What they claim: Apple's privacy settings include "Share iPhone & iPad Analytics" toggle. Implies toggling OFF stops data collection. Apple states "You're in control of your data."
What we found: Tommy Mysk and Talal Haj Bakry (Nov 2022) proved App Store, Music, TV, Books, Stocks apps transmit detailed analytics regardless of toggle. Data includes dsId mapped 1:1 to iCloud account. Class action: Libman v. Apple, Inc. Google Chrome and Microsoft Edge both respect their opt-out toggles.
What they claim: Apple's Siri privacy stated recordings processed by machine learning only. "What happens on your iPhone, stays on your iPhone." No disclosure of human review.
What we found: Whistleblower Thomas Le Bonniec (GlobeTech, Ireland, Jul 2019): contractors listened to ~1,000 Siri recordings/day. Captured medical info, drug deals, sexual encounters. $95M settlement Jan 2025 (Lopez v. Apple). France OFAC criminal investigation Oct 2025.
What they claim: Location Services settings: "With Location Services off, no apps will be able to use your location." Implies full user control.
What we found: System services (Compass Calibration, Find My, Motion Calibration, Networking & Wireless, Significant Locations) fire location checks every 1-2 minutes even with Location Services off. FCC fined carriers ~$200M (Apr 2024) for selling customer location data.
What they claim: Apple states ATT "is applied universally to all iOS apps, including those developed by Apple." Frames ATT as a level playing field.
What we found: ATT does not restrict first-party data. Apple collects App Store searches, browsing patterns, purchase history, News reading habits, Stocks usage for Apple Search Ads — data no competitor can access. Post-ATT opt-in rates ~15-25%, destroying competitors while Apple's data untouched.