Usage Data From iPhones Isn’t Anonymous: Researchers

Code sleuths at Mysk are challenging Apple's vaunted focus on privacy. The developers claim Apple's anonymous usage data for some in-house apps includes a Directory Services Identifier (DSID) uniquely linked to your Apple ID and iCloud data. Apple could potentially use this DSID to pinpoint your App Store browsing habits, according to Mysk. This seemingly contradicts Apple's assertion that "none" of the data is personally identifying, and appears to extend to iOS 16. The researchers previously shared findings that iOS 14.6 sends large volumes of first-party app activity to Apple, even if you completely disable device analytics or otherwise limit collection. This includes your iPhone model, keyboard languages and other details that could theoretically be used to fingerprint your device. Gizmodo notes that users filed a class action lawsuit against Apple after Mysk published its privacy data.

? New Findings: ? 1/6 Apple’s analytics data include an ID called “dsId”. We were able to verify that “dsId” is the “Directory Services Identifier”, an ID that uniquely identifies an iCloud account. Meaning, Apple’s analytics can personally identify you ? pic.twitter.com/3DSUFwX3nV

— Mysk ???? (@mysk_co) November 21, 2022

Mysk's code detectives are challenging Apple's lauded emphasis on privacy. The creators assert that a Directory Services Identifier (DSID) that is specifically connected to your Apple ID and iCloud data is included in Apple's anonymous usage data for some internal apps. According to Mysk, Apple might utilise your DSID to identify your App Store browsing patterns. This looks to go beyond iOS 16 and appears to violate Apple's claim that "none" of the data is individually identifying. Even if you totally turn off device analytics or take other measures to prevent collection, the researchers' earlier study showed that iOS 14.6 transmits significant amounts of first-party app activity to Apple. A fingerprint of your device could conceivably be created using information like the model of your iPhone, the keyboard languages, and other specifics. After Mysk published its privacy data, users sued Apple as a group, according to Gizmodo. [caption id="attachment_62576" align="aligncenter" width="1200"] Image credit: canva[/caption] Mysk noted that since iOS 14.5 introduced Apple's tool to block third-party app tracking, other software you use on your devices shouldn't be impacted. It's unclear precisely what Apple sees. According to Gizmodo, Apple encrypts use data and does not always process personal and general information jointly. As you might have guessed, Apple's failure to disclose its data acquisition procedures for analytics is a concern. Even if the amount of data being collected is little, there is a worry that Apple may not be upholding its privacy commitments.