Apple Sued for Allegedly Collecting User Data, Violating Its Own Privacy Policies
Apple is in hot water again, this time for allegedly deceiving its users into thinking their data is more confidential than it really is. An iOS development and security research company has pulled back the curtain on Apple’s misleading data-sharing settings, and its findings have already opened the door to a class action lawsuit.
Mysk, a software startup run by two security researchers, shared earlier this month that recent changes to Apple’s App Store “should raise many privacy concerns.” The updated app allegedly tracks all of a user’s taps for “analytics” purposes and sends that data to Apple. According to the researchers, this data isn’t anonymous; unique identifiers map each tap to a profile. This means a user’s interest in sensitive apps (like those related to pregnancy, LGBTQ interests, religion, medical treatment, and mental health and addiction treatment) is tracked by and visible to Apple. As first reported by Gizmodo, Apple is also said to collect a user’s device ID, internet connection data, keyboard languages, and more during a visit to the app store—and the problem extends to other pre-installed iPhone and iPad apps, like Books and Apple TV.
🧵1/5The recent changes that Apple has made to App Store ads should raise many #privacy concerns. It seems that the #AppStore app on iOS 14.6 sends every tap you make in the app to Apple.👇This data is sent in one request: (data usage & personalized ads are off)#CyberSecurity pic.twitter.com/1pYqdagi4e
— Mysk 🇨🇦🇩🇪 (@mysk_co) November 3, 2022
But this shouldn’t be the case. Apple’s own privacy settings claim to prevent data-sharing like that described above: When a user turns off analytics or app tracking, Apple claims to “disable the sharing of Device Analytics altogether.” The iPhone’s Device Analytics and Privacy page even says personal data isn’t logged at all, is “subject to privacy preserving techniques such as differential privacy,” or is removed from reports prior to receipt by Apple. Still, Mysk’s research appears to reveal that toggling this setting on or off doesn’t make an actual difference when it comes to what data Apple receives or how the user’s device information is treated.
The startup’s findings paved the way for a new privacy-oriented class action lawsuit. The lawsuit, according to Bloomberg Law, alleges that Apple’s data collection practices violate the California Invasion of Privacy Act by illegally recording users’ confidential activity, which lawyers say is a “huge and growing treasure trove of data that Apple amasses and uses for its own profit.” Worse, Apple allegedly deceives its users by making it appear as though they can control which information Apple is or isn’t able to access.
“Consumers reviewing Apple’s privacy controls are left with the reasonable impression that Apple will stop collecting and recording all of their app information or activity if ‘Allow Apps to Request to Track’ and/or ‘Share [Device] Analytics’ settings are turned off. But Apple’s assurances and promises regarding privacy are utterly false,” the lawsuit reads.
The class action suit is bound to be a punch to the gut for Apple’s marketing department, which has historically boasted Apple devices’ supposedly superior security. One of its most popular ad slogans over the last few years has been “Privacy. That’s iPhone.” Hopefully for Apple, whichever judge gets its latest lawsuit has a sense of irony.
Continue reading
Report: Apple Ignored its Partners’ Repeated Violations of Chinese Labor Laws
Apple has reportedly turned a blind eye to repeated violations of Chinese labor law in its partners' factories over the past six years.
Apple Sued for Antitrust Violations With Apple Pay
According to an antitrust lawsuit filed by Affinity Credit Union, Apple has abused its market position with Apple Pay to keep other companies out, earning fees on every tap-and-pay iPhone transaction.
Meta Hit With Class Action Suit Over iOS Anti-Tracking Violations
Apple’s App Tracking Transparency policy requires that apps get permission from individual users before tracking them across sites owned by other companies—something Meta allegedly didn’t do.
Epic Games Fined $520M for Alleged Privacy Violations, Unwanted Charges
According to the FTC, Epic violated the Children’s Online Privacy Protection Act (COPPA) and used dark patterns to manipulate users into making purchases they didn't really want.