Apple I phone Location tracking: That's not a bug

Today Apple finnaly published a press release with a statement about their tracking of geo locations of iPhone users. They clearly say that they did not intend to save this data on an I phone nor did they purposely send the data back to the apple servers. In their press release they state that this is a bug in the iPhone firmware iOS.

Apple:
6. People have identified up to a year’s worth of location data being stored on the iPhone. Why does my iPhone need so much data in order to assist it in finding my location today?
This data is not the iPhone’s location data-it is a subset (cache) of the crowd-sourced Wi-Fi hotspot and cell tower database which is downloaded from Apple into the iPhone to assist the iPhone in rapidly and accurately calculating location. The reason the iPhone stores so much data is a bug we uncovered and plan to fix shortly (see Software Update section below). We don’t think the iPhone needs to store more than seven days of this data.
7. When I turn off Location Services, why does my iPhone sometimes continue updating its Wi-Fi and cell tower data from Apple’s crowd-sourced database?
It shouldn’t. This is a bug, which we plan to fix shortly (see Software Update section below).”

This is redicoulus! This is no bug!

I have been developing software for many years. There are bugs in software developement. In this case it is very obvious that someone acted with full awareness of what he was doing. Thanks to this article and this piece of software I was able to extract the geo data from Nasir Naveed’s iPhone. Have a look at the table that he made available.

i phone geo locations
I phone collects timestamps, longitude and latitude (thanks to Nasir Naveed)

In this data format Apple stores timestamps which are equivalent to a data time and longitude and latitude where the phone was situated in this very moment. Additionally some other data is saved!

Apple is lying and distributing wrong information.

In their press release they state the following:

Apple:
3. Why is my iPhone logging my location?
The iPhone is not logging your location. Rather, it’s maintaining a database of Wi-Fi hotspots and cell towers around your current location, some of which may be located more than one hundred miles away from your iPhone, to help your iPhone rapidly and accurately calculate its location when requested.Calculating a phone’s location using just GPS satellite data can take up to several minutes. iPhone can reduce this time to just a few seconds by using Wi-Fi hotspot and cell tower data to quickly find GPS satellites, and even triangulate its location using just Wi-Fi hotspot and cell tower data when GPS is not available (such as indoors or in basements). These calculations are performed live on the iPhone using a crowd-sourced database of Wi-Fi hotspot and cell tower data that is generated by tens of millions of iPhones sending the geo-tagged locations of nearby Wi-Fi hotspots and cell towers in an anonymous and encrypted form to Apple.”

Note the lie that location tracking with GPS can take several minutes! If that was true how come every GPS in a car is working right away? Modern GPS in cars are able to quickly calculate the locations even in moving objects that are changing location quite frequently.

Apple is receiving your profile of motion

Apple:
5. Can Apple locate me based on my geo-tagged Wi-Fi hotspot and cell tower data?
No. This data is sent to Apple in an anonymous and encrypted form. Apple cannot identify the source of this data.”

It is true that for most research cases I can all of a sudden think of Apple does only need the anonymous data. but let’s be realistic. Even if Apple really would send over this data in an anonymous way. They could still do a meshup with the usual data they collect (your phone calls) and would probably be able to identify you quickly. In any case they have never asked your persmission!

Apple is obviously not even thinking to change its politics

Apple:
“In the next major iOS software release the cache will also be encrypted on the iPhone.”

ok tht is the coolest part! In Future iOS Apple will still store the data on your phone. They will probably still send it back to the Apple servers. But don’t wory, the data on your phone will be encrypted so that no one else but Apple can access the data! (not even yout) Thank you Apple! You must really be telling the truth when you say:

10. Does Apple believe that personal information security and privacy are important?
Yes, we strongly do. For example, iPhone was the first to ask users to give their permission for each and every app that wanted to use location. Apple will continue to be one of the leaders in strengthening personal information security and privacy.

Help to stop Apple spreading missleading information

It is very sad to see how a lot of big news sites are just skimming Apples press release and thereby help Apple to spread wrong and confusing information. Please pass on what you have discovered right now and don’t let Apple win over your privacy. Just use your Facebook account or Twitter.
Btw I don’t know about the law in other coutries but in Germany you have a two year warrenty for your product. So if this really is a bug this means that you could probably return your iPhone and get back your money. Have you ever considered to change away from your iPhone or have been unsatisfied? Well now is great moment to change!

Please send me your i phone’s location data

In the quoted blog  article and piece of software it is explained how you can extract your moving behaviour from your I phone. Apple has this data without even asking you. I am a researcher and I can think of many scientific usecases. So please do not only share your data with Apple but also with some people here in University. Just attach the logfile you extract from your iPhone to an email to r.pickhardt@gmail.com. I promise I will anonymize your data and only share it within the scientific community.
Btw you can find the full press release here

You may also like...

Popular Posts

2 Comments

  1. I do not agree with your opinion.
    A few points to think about:
    1) It has been shown that the positions are NOT the positions of the phone itself. (see eg here http://bit.ly/gslPoe (DE) or here http://bit.ly/goN908 (EN))
    2) On my BlackBerry, GPS takes ~5 mins to activate. Updates after that are then almost instantaneously. I would assume that this is true as well for the iPhone. Thus, I buy their argument that it is faster to use other data for an initial position assessment before GPS is available.
    3) That the iPhone uses cell and WLAN info to obtain a position can easily be verified. Switch off WIFI and open the map — you will only get a very rough position estimate, based on the cell you are in. Switch on WIFI and do the same, and depending on how many WLANs are in proximity, the position estimate will be much better.
    4) Obviously, for this kind of service, data needs to be send to Apple (BTW, Android/Google does the same http://bit.ly/eVSFoW (DE)). So I do not see how that in itself is wrong.
    5) The encryption point is still valuable–it means that when your phone is stolen/lost, a third person cannot extract the db to create a movement profile.
    The main point against Apple in my opinion is that the data are still send to Apple even if the location services are switched off — and that is something that they propose to fix.
    Whether this thing should be considered a bug or not…. I don’t know. But however, what use would the DB on the device be for Apple, if the required data are sent to them anyways?
    More on the topic here: http://bit.ly/fHwylf

  2. […] when exactly this company creates structures that make us all sit in a glass house! I am very sure that this is intentionally like this. Please don’t missunderstand me. My first impression of Android is very good and I knew […]

Leave a Reply to First privacy impressions of my new android phone Cancel reply

Your email address will not be published. Required fields are marked *