Can Apple see your photos?
Three places a photo can be
- Only on your iPhone. If you don't use iCloud Photos or iCloud Backup, the Photos app doesn't copy your pictures to iCloud. Pictures you've put in Messages in iCloud, iCloud Drive, Notes or a Shared Album are separate. They stay on the phone.
- In iCloud, with the default setting. A copy is on Apple's servers. Apple says it's encrypted while it's sent and on the server, but the keys are stored in Apple's data centres. That's what lets Apple help you get your data back, and Apple says it can decrypt your data on your behalf when you need it.
- In iCloud, with Advanced Data Protection. Photos are end-to-end encrypted. Apple says your trusted devices keep sole access to the keys for most of your iCloud data, and that Apple can no longer access it.
Why "can" isn't the same as "does"
Think of a hotel that keeps a master key. Having it means they could open your door, and it doesn't mean they do. What Apple does with its ability to decrypt, and how it responds to legal requests, are questions of policy. They aren't covered by the pages we used here, so we won't say more about them. What you can rely on is the design: with the default setting, Apple is able to read your iCloud photos. With Advanced Data Protection, it isn't.
Some photos stay readable even with it on
- Shared Albums: Apple says photos added to one are stored with standard data protection.
- "Anyone with the link" sharing is available to Apple's servers.
Apple says that in the United Kingdom, people who hadn't already turned it on can no longer do so. Here's the full picture.
What you can do
- Choose where your private pictures live. If a picture shouldn't be in iCloud at all, keep it off iCloud Photos, or delete it.
- Turn on Advanced Data Protection if it's offered to you and you've set up a way to recover your account.
- Add a lock of your own for the pictures that matter most. Then someone who gets into your Photos app doesn't get those. Hidden album or photo vault?
How FirstHour fits in
FirstHour doesn't send your pictures to Apple or to us. The check that finds cards and IDs uses Apple's tools on your iPhone, and the results stay there. Pictures you put in the Vault are encrypted on your iPhone and left out of iCloud and computer backups.
- If you use iCloud Photos, your iPhone may download a picture from your own iCloud so FirstHour can read it. That's a download, not an upload.
- A picture left in Photos after you add it to the Vault is still in Photos, and in iCloud Photos if that's on.
- There's no outside audit of the Vault yet. Here's what FirstHour can and can't see.
Questions
Can FirstHour or its makers see my photos?
No. The check runs on your iPhone and nothing is uploaded to us. Here's the full list.
Does iCloud Backup change the answer?
It's another place photos can go if you don't use iCloud Photos. The same two levels apply. What's in a backup.
Sources
- iCloud data security overview, Apple Support
- Advanced Data Protection for iCloud, Apple Platform Security
- iCloud security overview, Apple Platform Security
- What does iCloud back up?, Apple Support
- Apple can no longer offer Advanced Data Protection in the United Kingdom to new users, Apple Support