Apple has been touted as the brand built on privacy. But, nevertheless, it has been subject to numerous instances of data infringement. In April this year, Israeli firm Pegasus Spyware successfully hacked into iPhones belonging to human rights defenders, lawyers and journalists. In the latest round of troubles for the company, a report has brought Apple fresh allegations.
Tommy Mysk and Talal Haj Bakry, iOS developers and security researchers, detailed that contrary to what Apple wants us to believe, it in fact does collect user information. The findings have landed Apple in a new lawsuit for violating user privacy despite sharing analytics being switched off in the settings.
In their report, Mysk and Bakry showed that Apple’s analytics data includes an ID called “dsId”, which upon verification was found to be a Directory Services Identifier. The ID number is used to uniquely identify an iCloud account such that when an API call is made to iCloud, the dsId information carrying user name, email, and any data associated with the user’s iCloud account is sent to Apple.