Is Your iPhone or iPad taking a bite out of your privacy?
Some of Apple's products, including iOS 4 iPhones and iPads, have been collecting consumers' detailed location information and storing the data directly on the devices and on devices they have synced with. Apple has now created a software update (iOS4.3.3 <http://support.apple.com/kb/DL1358?viewlocale=en_US>) that responds to many of these issues. WPF urges all owners of these devices to ensure that they have downloaded the most recent versions of the iOS4 software. Some device owners may also want to opt out of location sharing.
If the devices are left with older versions of the iOS4 software, the data stored on the iPhones and iPads will be unencrypted and can include latitude, longitude, when the location was visited, for how long, and the data could have been collected for as long as a year. Up to 2 MG of data can be stored, which can be a lot of location data.
This tipsheet explains in capsule some of the key issues and discussions regarding this issue. Please note that in addition to the iOS4 devices, some smartphones using Google's Android system have similar issues. This tipsheet does not cover Android phones specifically.
How do I know if I have an iPhone or iPad that is collecting and storing my location details?
The Apple devices that are collecting and storing detailed location information are iPhones and iPads with the iOS4 operating system. To see what iOS version your device is using, look at the About this iPhone or About this Mac menu item, and see what iOS version number the device lists. If you have any doubts about whether or not your iPhone or iPad is one of those that can track you, see the next bullet point.
How do I know if detailed location data is stored on my phone or iPad?
You can install an app called iPhone Tracker to view your data, if it exists on your device. If you can see information through the iPhone Tracker app, then your Apple has been tracking you. If this is the case, we urge you to update your software immediately.
What can I do to fix this?
Fortunately, you can correct many of the issues related to this problem.
Why is this collection and storage a potential safety problem?
If the devices are not updated with the software update, and if location sharing is not turned off, the location information Apple is storing on these products can reveal where the devices have been, when, and for how long by longitude and latitude. Anyone who can pick up someone's iOS4 iPhone or iPad could potentially access this data, view it, and use it to find out where the device owner has spent time, what roads and cities she frequents, and where she has been on what date. The accuracy is potentially quite good.
Many people will be sensitive to having their location data stored on a device they carry around and use everyday -- and rightly so. Law enforcement professionals, including police and judges, human rights workers in foreign countries, journalists, and people with location concerns such as victims of domestic violence and stalking have a safety interest in keeping their home addresses, frequently traveled routes, and general geographic patterns private.
Special note for health care providers using iPads and iPhones
If you are a health care provider, and you have been using an iOS4 iPhone or an iPad as part of your practice, it will be especially important for you to take immediate steps to update the software for your devices. This may not solve all of the potential privacy issues, and we encourage health care providers to include smartphones in any HIPAA risk assessments. It may be prudent for health care providers to opt out of location sharing on their devices.
Who can access your location information?
Location information may be available to anyone who can access your iPhone or iPad, if you have not updated the software and if you have not opted out of sharing your location information.
Why was this collection and storage a privacy and consumer rights problem?
Beyond the immediate privacy concerns this issue raised when it was first discovered, there are additional privacy and consumer rights issues this controversy raised. Although Apple has taken steps to correct many of the problems, the rights consumers should have in regards to this data have not changed.
What has Apple done about this? What is Apple planning to do about this?
Apple has updated its software. Apple has said the following about what the software update will accomplish:
Apple has also said that in the next major iOS software release the cache will also be encrypted on the iPhone.
What is being done right now? Where can I find more information?
As more information becomes available, we will update this document
What more can I do?
Published April 21, 2011. Updated April 28, 2011, updated May 10, 2011.
|© WORLD PRIVACY FORUM | CONTACT|