Earlier this week, security reporter Brian Krebs published a story explaining that Apple's latest iPhones (iPhone 11 and iPhone 11 Pro) periodically check the user's location even if the user disables location services individually for each and every app and service in the iPhone's Settings app.
While this behavior ended when the user disabled location services system-wide, it was a bit of a head-scratcher. What was the iPhone doing and why? Was it sending this information to Apple? Why couldn't users find information on what was happening? Krebs had notified Apple of the issue as a potential security problem back in mid November, but the company responded this week stating:
We do not see any actual security implications… It is expected behavior that the Location Services icon appears in the status bar when Location Services is enabled. The icon appears for system services that do not have a switch in Settings.
While Apple deemed this not to be a security issue, Krebs rightly pointed out that it remained a potential privacy issue, given Apple's promises that users have control over how and when iPhones track or report their locations.
Will Strafach, founder and CEO of the company behind the Guardian firewall app for iOS, looked into the issue and tweeted that it seemed likely that the location data associated with these events weren't leaving the device. But he still couldn't explain exactly what was happening. This was his tweet:
FWIW, tried to dig into this and replicate.
it is very likely that it is something locally which does not have an exposed switch, no evidence of data sent to remote servers.
begs the question: why does Apple not answer for this directly?
Well, as of today Apple has answered for it directly. In a statement to TechCrunch's Zack Whittaker, Apple explained:
Ultra-wideband technology is an industry-standard technology and is subject to international regulatory requirements that require it to be turned off in certain locations… iOS uses Location Services to help determine if iPhone is in these prohibited locations in order to disable ultra-wideband and comply with regulations… The management of ultra-wideband compliance and its use of location data is done entirely on the device, and Apple is not collecting user location data.
When Apple introduced the iPhone 11 and iPhone 11 Pro this fall, it included a new chip called the U1 that enables ultra-wideband (UWB) for locating other devices in immediate proximity. Presently, it is only used for the phone's AirDrop file-sharing feature, but it is expected to be used for other features such as augmented reality and the company's rumored upcoming Tile competitor in the future.
The brief flash of controversy on Twitter and tech blogs over this issue illustrates the challenges Apple faces with its privacy-oriented marketing. When the company attempts to position itself as the privacy-friendly alternative to data-collecting competitors, it invites a great deal of scrutRead More – Source
