iPhone 'secret file' records users' every move

[RockyHorror]

Researchers have discovered a file on the Apple iPhone and iPad that reportedly saves every detail of its owner's movements.

The data file in the mobile 3G devices is then copied to the user's computer during synchronisation, reports The Guardian.

"Apple has made it possible for almost anybody - a jealous spouse, a private detective - with access to your phone or computer to get detailed information about where you've been," said security researcher Pete Warden.

The file details the latitude and longitude of the phone's recorded co-ordinates. It also records a timestamp, revealing where the phone was at different times of the day.

The recording file was thought to be issued in June 2010 with Apple's iOS 4 update to the phone's operating system.

"This is a worrying discovery. Location is one of the most sensitive elements in anyone's life - just think where people go in the evening," said Simon Davies of Privacy International.

Davies added: "The existence of that data creates a real threat to privacy. The absence of notice to users or any control option can only stem from an ignorance about privacy at the design stage."

The iPhone is thought to be the only mobile phone that tracks its owner's movements and data with such a file.

The file apparently moves to new devices when the owner replaces or upgrades their iPhone. It also records data whether or not the user agrees to allow their data to be tracked.

"The fact that [the file] is transferred across [to a new iPhone or iPad] when you migrate is evidence that the data-gathering isn't accidental," Allen added.

Warden and Allan launched the iPhone Tracker information website to answer consumer questions about their discovery. The site also offers a downloadable application that will display the data the iPhone is recording.

And if you can't be bothered to read that, the general point of the article is that, Apple has implemented a file within the iPhone's OS that records data of a user's whereabouts by taking the co-ordinates of the phones position and stores the information.

This effects me because I have an iPhone, but it doesn't really bother me as I was aware that the iPhone's strong point was never going to be it's privacy for example the EXIF data that is recorded whenever you take a picture.

Does this bother you?

[Stephen!]

I don't have an iPhone, but this doesn't sound that bad tbh. Maybe even a perk.

[Mr-Trainor]

I read about this last night. I don't have an iPhone at the moment but will still be getting one, as this doesn't seem like much of an issue to me.

[GommeInc]

Don't all smartphones do this anyway? :P Google collect data based on your whereabouts and the iPhone obvious does it too. The only time it will become a problem is if Apple goons started following you around, or information collected can be used against you in some way.

[Triz]

I don't have my "current location" turned on nor do I have 3G turned on when I'm not using it, so I assume this does not effect me?

[xxMATTGxx]

I think part of the issue people are stating is that there is a copy of it being held on your devices unencrypted. Oh and that Apple have stated that this only happens with the users consent but that's not the case.

(From what I've been reading)

Taken from the "iPhoneTracker" FAQ (http://petewarden.github.com/iPhoneTracker/#faq)


What’s so bad about this?

The most immediate problem is that this data is stored in an easily-readable form on your machine. Any other program you run or user with access to your machine can look through it.

The more fundamental problem is that Apple are collecting this information at all. Cell-phone providers collect similar data almost inevitably as part of their operations, but it’s kept behind their firewall. It normally requires a court order to gain access to it, whereas this is available to anyone who can get their hands on your phone or computer.

By passively logging your location without your permission, Apple have made it possible for anyone from a jealous spouse to a private investigator to get a detailed picture of your movements.

[GommeInc]

Taken from the "iPhoneTracker" FAQ (http://petewarden.github.com/iPhoneTracker/#faq)
The jealous spouse and private investigator need access to said device to do anything, surely? Unless there are private investigator apps laid around.

[xxMATTGxx]

The jealous spouse and private investigator need access to said device to do anything, surely? Unless there are private investigator apps laid around.

Does state that in the FAQ, if they had access to your device or computer then they can do that.

[GommeInc]

Does state that in the FAQ, if they had access to your device or computer then they can do that.
Then surely it's your fault for letting your device enter the hands of others? If an issue does arise, then there are laws in place to protect you :P The Human Rights Act has the privacy laws for starters. If the jealous spouse lets loose that she's been spying on you then she will have fun paying out sums of money towards you for invading privacy :P

I can see how it can be an issue, but it depends if you're paranoid enough to be affraid of private investigators and jealous/paranoid lovers, mistresses and spouses.

[xxMATTGxx]

Then surely it's your fault for letting your device enter the hands of others? If an issue does arise, then there are laws in place to protect you :P The Human Rights Act has the privacy laws for starters. If the jealous spouse lets loose that she's been spying on you then she will have fun paying out sums of money towards you for invading privacy :P

I can see how it can be an issue, but it depends if you're paranoid enough to be affraid of private investigators and jealous/paranoid lovers, mistresses and spouses.

Most likely but then you wonder why have Apple left the file unencrypted in the first place? Which can also be located within your iOS back ups on your computer systems. I don't find this too much of a problem in regards of Apple tracking locations but don't they have to inform the owners of the devices that they are doing this?

[GommeInc]

Most likely but then you wonder why have Apple left the file unencrypted in the first place? Which can also be located within your iOS back ups on your computer systems. I don't find this too much of a problem in regards of Apple tracking locations but don't they have to inform the owners of the devices that they are doing this?
Suppose, I'm not sure how iOS works so hard to say why they haven't. Perhaps it's the only way legitimate Apps can collect data, or the phone itself? Most smartphones tend to have some mention of privacy, locations and how they collect data, so maybe Apple think this covers them.

[xxMATTGxx]

Suppose, I'm not sure how iOS works so hard to say why they haven't. Perhaps it's the only way legitimate Apps can collect data, or the phone itself? Most smartphones tend to have some mention of privacy, locations and how they collect data, so maybe Apple think this covers them.

Apple stated they did this a while back and only did it if the user agreed, some say this isn't the case and they do it regardless.


Apple told Congress last July that all location data collected by the iPhone remains private. According to Apple lead counsel Bruce Sewell, Apple does collect anonymous location data from iPhones in an effort to improve its own database of cell tower and WiFi hotspot locations, but that it only does this with user consent. The discovery made by Allan and Warden clearly shows that this is happening constantly without explicit consent like Apple treats GPS, however, and it sure isn't anonymous when it's accessible directly from the user's device.

Source (http://arstechnica.com/apple/news/2011/04/how-apple-tracks-your-location-without-your-consent-and-why-it-matters.ars)


I thought I would add this in about other phone platforms that both have this whole "Location" services and what not:


Google has an opt-in system for location data collection but they refused to answer on the record whether this "anonymous" location data is logged persistently. While no file was found on the Android phones, Google of course would be pretty happy to store the reams of data on their servers and sell it to advertisers for the highest bid.

Source (http://wmpoweruser.com/unlike-apple-microsoft-does-not-track-wp7-users/)



Microsoft got asked the same question in regards of Windows Phone 7 and they confirmed
the only locational data stored on your Windows Phone 7 device is your last known location, for use with the Find My Phone feature.

Source (http://wmpoweruser.com/unlike-apple-microsoft-does-not-track-wp7-users/)