Research Reveals How iPhone Push Notifications Leak User Data

Security researcher Tommy Mysk has demonstrated that iPhone push notifications are being used by popular apps to covertly send data about the user.

In a new video outlining the practice, Mysk highlighted how certain iOS apps exploit a feature introduced in iOS 10 that is designed to allow apps to customize push notifications. This feature, initially intended to enable apps to enrich notifications with additional content or decrypt encrypted messages, has seemingly been repurposed by some developers for more secretive activities. According to Mysk’s findings, various popular applications, including TikTok, Facebook, Twitter, LinkedIn, and Bing, are using the short background execution time granted for notification customization to send analytics information.

This practice is particularly worrisome because it circumvents the typical restrictions imposed by iOS on background app activities. Apple has always maintained strict control over applications running in the background to protecting user privacy and ensure optimal device performance. However, the push notification feature appears to have unintentionally provided a backdoor for apps to conduct background data transmission.

The type of data being sent includes unique device signals that can be used for fingerprinting and tracking users across different apps. Fingerprinting is a method of collecting specific information about a device, such as its hardware and software configurations, to create a unique identifier for the user. This identifier can then be used to track the user’s activities across different applications, which can then be used for various activities such as targeted advertising.

Apple does not permit fingerprinting and will soon require developers to explicitly state why their apps need access to APIs that are often used for fingerprinting. This move is in line with Apple’s efforts to strengthen user privacy, such as the introduction of App Tracking Transparency in iOS 14.5, which requires apps to obtain user permission before tracking their activity across other companies’ apps and websites.Tags: Apple Security, Apple Privacy
This article, “Research Reveals How iPhone Push Notifications Leak User Data” first appeared on MacRumors.com

Discuss this article in our forums

Related posts

Latest posts

Two Nothing phones are coming, but the names are a surprise

A report claims two new Nothing phones will launch on March 4, but the names aren't exactly what we expected.

Samsung Galaxy S25 Ultra vs. Galaxy Z Fold 6

To fold or not to fold, that is the question? We've got the answer with this head-to-head comparison of the Samsung Galaxy S25 Ultra and the Samsung Galaxy Z Fold 6.

3 GPUs you should buy instead of the RTX 5080

Nvidia's RTX 5080 is a bit of a disappointment. Here are three alternatives to keep in mind when you go to upgrade.

H&R Block will make tax season easy — 50% off from Amazon

If you need help for the tax season, don't miss this chance to buy the H&R Block Deluxe + State Tax Software 2024 for only $30 from Amazon after a 50% discount.

Samsung’s new vegan leather Galaxy S25 Ultra case is already my favorite

Samsung's vegan leather feels supreme in the hands, and it'll keep the monstrous Galaxy S25 Ultra safe.

Where to buy the RTX 5090 and RTX 5080 today

Nvidia's best graphics cards, the RTX 5090 and the RTX 5080, are finally here. Here is where to buy an RTX 50-series GPU today.

Asus admits its new motherboard can scrape your GPU, but it won’t cause damage

Asus claims there should be no concerns over functionality or performance when it comes to its new GPU connector.

It’s a shame Microsoft’s upgraded Surface Laptop 7 is just ‘for business’

Microsoft is updating its Surface Laptop and Surface Pro with Intel Lunar, and bringing 5G to the former for the first time ever.

Nvidia RTX 5090 ‘lottery’ reportedly ends in screams and chaos

A Japanese "lottery" for the RTX 5090 reportedly drew a massive crowd and stirred a lot of commotion.

A video call to space may change mobile coverage forever

Vodafone has successfully tested the world's first "space video call," and it may change mobile phone coverage forever.