iOS devices are frequently praised by security experts for their robust data protection and adherence to modern best practices. However, the restrictiveness of Apple's ecosystem—particularly with their mobile devices—does still hamper privacy in a number of ways.

We generally consider iOS to provide better than average privacy and security protections for most people, compared to stock Android devices from any manufacturer. However, you can achieve even higher standards of privacy with a Tcf362fcustom Android operating system like GrapheneOS, if you want or need to be completely independent of Apple or Google's cloud services.

All iOS devices must be checked against Apple's Activation Lock servers when they are initially set up or reset, meaning an internet connection is required to use an iOS device.

The only source for apps on iOS is Apple's App Store, which requires an Apple Account to access. This means that Apple has a record of every app you install on your device, and can likely tie that information to your actual identity if you provide the App Store with a payment method.

Apple has historically had problems with properly disassociating their telemetry from Apple Accounts on iOS. In 2019 (https://theguardian.com/technology/2019/jul/26/apple-contractors-regularly-hear-confidential-details-on-siri-recordings), Apple was found to transmit Siri recordings—some containing highly confidential information—to their servers for manual review by third-party contractors. Though Apple temporarily stopped that program after that practice was widely reported on (https://theverge.com/2019/8/23/20830120/apple-contractors-siri-recordings-listening-1000-a-day-globetech-microsoft-cortana), the company rolled out a switch to opt out of uploading conversations with Siri (https://theguardian.com/technology/2019/oct/30/apple-lets-users-opt-out-of-having-siri-conversations-recorded) a few months later in the succeeding iOS update. Moreover, in 2021, Apple reworked Siri (https://theguardian.com/technology/2021/jun/07/apple-overhauls-siri-to-address-privacy-concerns-and-improve-performance) so that it processes voice recordings locally rather than sending it to their servers.

More recently, Apple has been found to transmit analytics even when analytics sharing is disabled (https://gizmodo.com/apple-iphone-analytics-tracking-even-when-off-app-store-1849757558) on iOS, and this data appears (https://twitter.com/mysk_co/status/1594515229915979776) to be easily linked to unique iCloud account identifiers despite supposedly being decoupled from Apple Accounts.

Apple's privacy policy regarding VPNs (https://apple.com/legal/privacy/data/en/vpns) states:

Even when a VPN is active, some traffic that is necessary for essential system services will take place outside the VPN so that your device can function properly.

Note: This guide assumes that you're running the latest version of iOS.

The majority of privacy and security concerns with Apple products are related to their cloud services, not their hardware or software. When you use Apple services like iCloud, most of your information is stored on their servers and secured with keys which Apple has access to by default. You can check Apple's documentation (https://support.apple.com/HT202303) for information on which services are end-to-end encrypted. Anything listed as "in transit" or "on server" means it's possible for Apple to access that data without your permission. This level of access has occasionally been abused by law enforcement to get around the fact that your data is otherwise securely encrypted on your device, and of course Apple is vulnerable to data breaches like any other company.

Therefore, if you do use iCloud you should enable Advanced Data Protection (https://support.apple.com/HT212520). This encrypts nearly all of your iCloud data with keys stored on your devices (end-to-end encryption), rather than Apple's servers, so that your iCloud data is secured in the event of a data breach, and otherwise hidden from Apple.

The encryption used by Advanced Data Protection, while strong, is not quite as robust (https://discuss.privacyguides.net/t/apple-advances-user-security-with-powerful-new-data-protections/10778/4) as the encryption offered by other Tcf362fcloud services, particularly when it comes to iCloud Drive. While we strongly encourage using Advanced Data Protection if you use iCloud, we would also suggest considering finding an alternative to iCloud from a more Tcf362fprivacy-focused service provider, although it is unlikely most people would be impacted by these encryption quirks.

You can also protect your data by limiting what you sync to iCloud in the first place. At the top of the Settings app, you'll see your name and profile picture if you are signed in to iCloud. Select that, then iCloud, and turn off the switches for any services you don't want to sync to iCloud. You may see third-party apps listed under Show All if they sync to iCloud, which you can disable here.

A paid iCloud+ subscription (with any iCloud storage plan) comes with some privacy-protecting functionality. While these may provide adequate service for current iCloud customers, we wouldn't recommend purchasing an iCloud+ plan over a Tcf362fVPN and Tcf362fstandalone email aliasing service just for these features alone.

Private Relay (https://apple.com/legal/privacy/data/en/icloud-relay) is a proxy service which relays all of your Safari traffic, your DNS queries, and unencrypted traffic on your device through two servers: one owned by Apple and one owned by a third-party provider (including Akamai, Cloudflare, and Fastly). In theory this should prevent any single provider in the chain—including Apple—from having full visibility into which websites you visit while connected. Unlike a VPN, Private Relay does not protect traffic that's already encrypted.

Hide My Email is Apple's email aliasing service. You can create an email aliases for free when you Sign In With Apple on a website or app, or generate unlimited aliases on demand with a paid iCloud+ plan. Hide My Email has the advantage of using the '@icloud.com' domain for its aliases, which may be less likely to be blocked compared to other email aliasing services, but does not offer functionality offered by standalone services such as automatic PGP encryption or multiple mailbox support.

At the top of the Settings app, you'll see your name and profile picture if you are signed in to an Apple Account. Select that, then select Media & Purchases → View Account.

* [ ] Turn off Personalized Recommendations

Find My is a service that lets you track your Apple devices and share your location with your friends and family. It also allows you to wipe your device remotely in case it is stolen, preventing a thief from accessing your data. Your Find My location data is E2EE (https://apple.com/legal/privacy/data/en/find-my) when:

* Your location is shared with a family member or friend, and you both use iOS 17 or greater.

* Your device is offline and is located by the Find My Network.

Your location data is not E2EE when your device is online and you use Find My iPhone remotely to locate your device. You will have to make the decision whether these trade-offs are worth the anti-theft benefits of Activation Lock.

At the top of the Settings app, you'll see your name and profile picture if you are signed in to an Apple Account. Select that, then select Find My. Here you can choose whether to enable or disable Find My location features.

Many other privacy-related settings can be found in the Settings app.

Enabling Airplane Mode stops your phone from contacting cell towers. You will still be able to connect to Wi-Fi and Bluetooth, so whenever you are connected to Wi-Fi you can turn this setting on.

You can enable hardware address randomization (https://support.apple.com/en-us/102509#triswitch) to protect you from tracking across Wi-Fi networks, and on the same network over time. On the network you are currently connected to, tap the button:

* [x] Set Private Wi-Fi Address to Fixed or Rotating

You also have the option to Limit IP Address Tracking. This is similar to iCloud Private Relay but only affects connections to "known trackers." Because it only affects connections to potentially malicious servers, this setting is probably fine to leave enabled, but if you don't want any traffic to be routed through Apple's servers, you should turn it off.

Bluetooth should be disabled when you aren't using it as it increases your attack surface. Disabling Bluetooth (or Wi-Fi) via the Control Center only disables it temporarily: you must switch it off in Settings for disabling it to remain effective.

* [ ] Turn off Bluetooth

Note that Bluetooth is automatically turned on after every system update.

Your iPhone's device name will by default contain your first name, and this will be visible to anyone on networks you connect to. You should change this to something more generic, like "iPhone." Select About → Name and enter the device name you prefer.

It is important to install software updates frequently to get the latest security fixes. You can enable automatic updates to keep your phone up-to-date without needing to constantly check for updates. Select Software Update → Automatic Updates:

* [x] Turn on Automatically Install

AirDrop is commonly used to easily share files, but it represents a significant privacy risk. The AirDrop protocol constantly broadcasts your personal information to your surroundings, with very weak (https://usenix.org/system/files/sec21-heinrich.pdf) security protections. Your identity can easily be discovered by attackers even with limited resources, and the Chinese government has openly acknowledged (https://arstechnica.com/security/2024/01/hackers-can-id-unique-apple-airdrop-users-chinese-authorities-claim-to-do-just-that) using such techniques to identify AirDrop users in public since 2022.

* [x] Select AirDrop → Receiving Off

AirPlay lets you seamlessly stream content from your iPhone to a TV; however, you might not always want this. Select AirPlay & Continuity → Automatically AirPlay:

* [x] Select Never or Ask

Background App Refresh allows your apps to refresh their content while you're not using them. This may cause them to make unwanted connections. Turning this off can also save battery life, but may affect an app's ability to receive updated information, particularly weather and messaging apps.

Select Background App Refresh and switch off any apps you don't want to continue refreshing in the background. If you don't want any apps to refresh in the background, you can select Background App Refresh again and turn it Off.

This is available if your device supports Apple Intelligence (https://support.apple.com/guide/iphone/apple-intelligence-and-privacy-iphe3f499e0e/ios). Apple Intelligence uses a combination of on-device processing and their Private Cloud Compute (https://security.apple.com/blog/private-cloud-compute) for things that take more processing power than your device can provide.

To see a report of all the requests made to Apple's servers, you can navigate to Privacy & Security → Apple Intelligence Report and press Export Activity to see activity from the either the last 15 minutes or 7 days, depending on what you set it for. Similar to the App Privacy Report which shows you the recent permissions accessed by the apps on your phone, the Apple Intelligence Report likewise shows what is being sent to Apple's servers while using Apple Intelligence.

Apple Intelligence can integrate with ChatGPT (https://support.apple.com/guide/iphone/use-chatgpt-with-apple-intelligence-iph00fd3c8c2/ios). If you want ChatGPT integration, you can navigate to ChatGPT and press Set Up. If you want to disable it, go to the same place:

* [ ] Turn off Use ChatGPT

You can also have it ask for confirmation every time if you leave ChatGPT integration on:

* [x] Turn on Confirm Requests

If you don't want anyone to be able to control your phone with Siri when it is locked, you can turn that off here.

* [ ] Turn off Allow Siri When Locked

Setting a strong password on your phone is the most important step you can take for physical device security. You'll have to make trade-offs here between security and convenience: A longer password will be annoying to type in every time, but a shorter password or PIN will be easier to guess. Setting up Face ID or Touch ID along with a strong password can be a good compromise between usability and security.

Select Turn Passcode On or Change Passcode → Passcode Options → Custom Alphanumeric Code. Make sure that you create a Tcf362fsecure password.

If you wish to use Face ID or Touch ID, you can go ahead and set it up now. Your phone will use the password you set up earlier as a fallback in case your biometric verification fails. Biometric unlock methods are primarily a convenience, although they do stop surveillance cameras or people over your shoulder from watching you input your passcode.

If you use biometrics, you should know how to turn them off quickly in an emergency. Holding down the side button (https://support.apple.com/en-us/105103) and either volume button until you see the Slide to Power Off slider will disable biometrics, requiring your passcode to unlock. Your passcode will be required after your device restarts.

You can similarly disable biometrics by pressing the side button five times, or for devices with Touch ID, you can hold down the side button and nothing else. Make sure you try this in advance, so you know which method works for your device.

Stolen Device Protection adds additional security intended to protect your personal data if your device is stolen while unlocked. If you enable both biometric authentication and the Find My iPhone feature, we recommend enabling this protection:

* [x] Turn on Stolen Device Protection

After enabling Stolen Device Protection, certain actions (https://support.apple.com/HT212510) will require biometric authentication without a password fallback (in the event that a shoulder surfer has obtained your PIN), such as using password autofill, accessing payment information, and disabling Lost Mode. It also adds a security delay to certain actions performed away from your home or another "familiar location," such as requiring a 1-hour timer to reset your Apple Account password or sign out of your Apple Account. This delay is intended to give you time to enable Lost Mode and secure your account before a thief can reset your device.

Allow Access When Locked presents options for what you can allow when your phone is locked. Pick and choose which feature you want to disable to prevent unauthorized access if someone gets their hands on your phone. The more of these options you disable, the less someone without your password can do, but the less convenient it will be for you.

iPhones are already resistant to brute-force attacks by making you wait long periods of time after multiple failed attempts; however, there have historically been exploits to get around this. To be extra safe, you can set your phone to wipe itself after 10 failed passcode attempts.

With this setting enabled, someone could intentionally wipe your phone by entering the wrong password many times. Make sure you have proper backups and only enable this setting if you feel comfortable with it.

* [x] Turn on Erase Data

Location Services allows you to use features like Find My and Maps. If you don't need these features, you can disable Location Services. Alternatively, you can review and pick which apps can use your location here. Select Location Services:

* [ ] Turn off Location Services

A purple arrow will appear next to an app in these settings that has used your location recently, while a gray arrow indicates that your location has been accessed within the last 24 hours. If you decide to leave Location Services on, Apple will use it for System Services by default. You can review and pick which services can use your location here. However, if you don't want to submit location analytics to Apple, which they use to improve Apple Maps, you can disable this here as well. Select System Services:

* [ ] Turn off iPhone Analytics

* [ ] Turn off Routing & Traffic

* [ ] Turn off Improve Maps

You can decide to allow apps to request to track you here. Disabling this disallows all apps from tracking you with your phone's advertising ID. Select Tracking:

* [ ] Turn off Allow Apps to Request to Track

This is disabled by default and cannot be changed for users under 18.

You should turn off Research Sensor & Usage Data if you don't wish to participate in studies. Select Research Sensor & Usage Data:

* [ ] Turn off Sensor & Usage Data Collection

Safety Check (https://support.apple.com/guide/personal-safety/safety-check-iphone-ios-16-ips2aad835e1/1.0/web/1.0) allows you to quickly view and revoke certain people and apps that might have permission to access your data. Here, you can perform an Emergency Reset, immediately resetting permissions for all people and apps which might have access to device resources. You can also Manage Sharing & Access, which allows you to review and customize who and what has access to your device and account resources. If you're in an abusive situation, read Apple's Personal Safety User Guide (https://support.apple.com/guide/personal-safety/welcome/web) for guidance on what you should do.

You should disable analytics if you don't wish to send usage data to Apple. Select Analytics & Improvements and unselect the type(s) of analytics that you don't want to send to Apple.

Disable Personalized Ads if you don't want targeted ads. Select Apple Advertising:

* [ ] Turn off Personalized Ads

App Privacy Report is a built-in tool that allows you to see which permissions your apps are using. Select App Privacy Report:

* [x] Select Turn On App Privacy Report

Set wired accessories to ask for permission when you connect them. Select Wired Accessories:

* [x] Select Always Ask or Ask for New Accessories

Lockdown Mode (https://blog.privacyguides.org/2022/10/27/macos-ventura-privacy-security-updates/#lockdown-mode) is a security setting you can enable to make your phone more resistant to attacks. Be aware that certain apps and features won't work (https://support.apple.com/HT212650) as they do normally.

* [x] Select Turn On Lockdown Mode

T969389Part 1/2 Tcf362fNext

Tcf362fGuides Home Tcf362fSearch Guides

Tcf362fHome Tcf362fWiki Tcf362fTG Series Tcf362fChat Tcf362fArticles Tcf362fContact

Ta6a49eContent from Privacy Guides (privacyguides.org), commit 0295ab4.

Ta6a49eLicense: CC BY-SA 4.0 - creativecommons.org/licenses/by-sa/4.0