{"id":1136,"date":"2010-06-26T07:08:25","date_gmt":"2010-06-26T15:08:25","guid":{"rendered":"\/?p=1136"},"modified":"2010-06-26T07:14:32","modified_gmt":"2010-06-26T15:14:32","slug":"apple-giving-out-your-iphone-fingerprints-and-location","status":"publish","type":"post","link":"https:\/\/www.identityblog.com\/?p=1136","title":{"rendered":"Apple giving out your iPhone fingerprints and location"},"content":{"rendered":"<p><img class=\"alignright\" style=\"margin: 10px; float: right;\" src=\"\/wp-content\/images\/2010\/06\/iPhone1.png\" alt=\"\" \/>I went to the\u00a0Apple App store\u00a0a few days ago to download a new iPhone application.\u00a0\u00a0I\u00a0expected that\u00a0this would be as straightforward as it had been in the past:\u00a0choose a title, click on pay, and\u00a0presto &#8211; a new application\u00a0becomes available.<\/p>\n<p>No such luck.\u00a0 Apple had changed it&#39;s privacy policy, and I was taken to\u00a0the screen at right,\u00a0\u00a0To proceed I had to &#8220;read and accept the new Terms and Conditions&#8221;.\u00a0 I pressed OK and up came page 1 of a new\u00a045 page <a href=\"http:\/\/web.archive.org\/web\/*\/http:\/\/www.apple.com\/legal\/privacy\/\">&#8220;privacy&#8221; policy<\/a>.<\/p>\n<p><img loading=\"lazy\" style=\"vertical-align: middle;\" src=\"\/wp-content\/images\/2010\/06\/iPhone37.gif\" alt=\"\" width=\"253\" height=\"74\" \/><\/p>\n<p>I would assume &#8220;normal people&#8221; would say &#8220;uncle&#8221; and &#8220;click approve&#8221; around page 3.\u00a0 But\u00a0in light of what is happening in the industry around location services\u00a0I kept reading the tiny, unsearchable, unzoomable print.<\/p>\n<p>And there\u00a0&#8211; on\u00a0page 37 &#8211;\u00a0you come to\u00a0&#8220;the news&#8221;.\u00a0\u00a0Apple&#39;s new <a href=\"http:\/\/www.apple.com\/legal\/privacy\/\">&#8220;privacy&#8221; policy <\/a>reveals that <em>if you use Apple products\u00a0Apple can disclose your device fingerprints and location\u00a0to whomever it chooses\u00a0and for whatever purpose:<\/em><\/p>\n<p style=\"margin-left: 30px\"><strong>Collection and Use of Non-Personal Information<\/strong><\/p>\n<p style=\"margin-left: 30px\">We also collect non-personal information\u00a0&#8211; data in a form that does not permit direct association with any specific individual. <strong>We may collect, use, transfer, and disclose non-personal information for any purpose<\/strong>. The following are some examples of non-personal information that we collect and how we may use it:<\/p>\n<ul style=\"margin-left: 60px\">\n<li>We may collect information such as occupation, language, zip code, area code, <strong>unique device identifier<\/strong>, <strong>location<\/strong>, and the time zone where an Apple product is used so that we can better understand customer behavior and improve our products, services, and advertising.<\/li>\n<\/ul>\n<p><strong>No &#8220;direct association with any specific individual&#8230;&#8221;<\/strong><\/p>\n<p>Maintaining that\u00a0a personal\u00a0device\u00a0fingerprint has &#8220;no\u00a0direct association with any specific individual&#8221; is\u00a0unbelievably specious in 2010 &#8211; and even more\u00a0ludicrous than it used to be\u00a0now that Google and others have\u00a0collected the information to build\u00a0giant centralized databases linking phone MAC addresses to house addresses.\u00a0\u00a0And &#8211; big surprise &#8211; my iPhone, at least, came bundled with Google&#39;s location service.<\/p>\n<p>The irony here is\u00a0a bit\u00a0fantastic.\u00a0 I was, after all, using an &#8220;iPhone&#8221;.\u00a0\u00a0I assume Apple&#39;s lawyers are aware there is an\u00a0&#8220;I&#8221; in the word &#8220;iPhone&#8221;.\u00a0 We&#39;re not talking here about a piece of shared communal property that might be\u00a0picked up\u00a0by anyone in\u00a0the village.\u00a0\u00a0An iPhone\u00a0is carried around by its owner.\u00a0 If\u00a0a link is established between the owner&#39;s natural identity and the device (as Google&#39;s databases have done), its &#8220;unique\u00a0device identifier&#8221; becomes a digital fingerprint for the person using it.\u00a0<\/p>\n<p>Apple&#39;s statements\u00a0constitute more disappointing doubletalk\u00a0that\u00a0is suspiciously well-aligned with\u00a0the statements\u00a0in Google&#39;s\u00a0<a href=\"http:\/\/googlepolicyeurope.blogspot.com\/2010\/04\/data-collected-by-google-cars.html\">now-infamous WiFi FAQ<\/a>.\u00a0\u00a0Checking with the &#8220;Wayback machine&#8221; (which is of course\u00a0not guaranteed to be\u00a0accurate or up to date) the <a href=\"http:\/\/web.archive.org\/web\/*\/http:\/\/www.apple.com\/legal\/privacy\">last change recorded in Apple&#39;s privacy policy<\/a> seems to have been made\u00a0in April 2008.\u00a0 It contained no reference to device identifiers or location services.\u00a0<\/p>\n<p>\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The company says it may now collect, use, transfer, and disclose our iPhone, iPad or computer identifier and location for any purpose if we opt into iTunes.<\/p>\n","protected":false},"author":68,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[6,17,71,47,11],"tags":[],"_links":{"self":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/1136"}],"collection":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/users\/68"}],"replies":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1136"}],"version-history":[{"count":1,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/1136\/revisions"}],"predecessor-version":[{"id":1411,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/1136\/revisions\/1411"}],"wp:attachment":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1136"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1136"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1136"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}