Privacy and protection have always been one of Apple’s weapons against what the competition offers. It is a guarantee that the company brings to its ecosystem, wanting it to be something natural and transparent.
In fact, this idea may be wrong given what has been shown lately. Again, real information seems to indicate that Apple could collect data allowing iOS to identify users.
Apple may collect data
The idea of Apple collecting data from its users is not new. It has been discovered for some time that even with the change in privacy settings, iPhone and iOS ignore this decision and continue to collect and send user-specific data.
This issue was so important that it led to Apple being sued. Now the same security researchers have taken it a step further and shown that this same data can be used to identify iOS users.
New discoveries:
1/6
Apple's analytics data includes an identifier called "dsId". We were able to verify that "dsId" is the "Directory Services Identifier", an identifier that uniquely identifies an iCloud account. This means Apple's analytics can personally identify youpic.twitter.com/3DSUFwX3nV— Mysk (@mysk_co) November 21, 2022
New evidence that can identify users
Having already proven that Apple collects user information, these security analysts have now gone further. They proved that one of the fields collected makes it possible to identify the user. A unique iCloud ID is used for this.
By having access to the Directory Services Identifier, or DSID, Apple is then able to cross-reference the data and access a lot of information. Here we have full name, phone number, date of birth, email address and more according to the tests from Mysk??
2/6
Apple states in its Device Analytics & Privacy Statement that the data collected does not identify you personally. This is incorrect. We have also shown previously that the #App Store continues to send detailed analytics to Apple even when analytics sharing is disabled. pic.twitter.com/2mJiHtM1GD— Mysk (@mysk_co) November 21, 2022
So how is the privacy in this case?
It is a practice that is not linear with what Apple proclaims for its services and equipment. This contradicts the company's information, which reinforces in their public policy that "this information does not contain any personal data".
Interestingly, and so far Apple has been silent on this topic. With a court case on this subject, it should soon give more explanations, which are expected by many Internet users. You will have to answer the question whether or not you collect data and if you use it for something. What is curious is that companies like Meta or Google have blocked access to this information.
