Two security researchers recently raised concerns for what they discovered about the iPhone and iPad with 3G support: The phones maintain detailed logs that track users’ locations, which are then stored on unencrypted files on their computer. Although it appears that Apple is not actively collecting the location tracking data, it still raises some concerns for the privacy of everyone who owns a iPhone or iPad.
The data file is stored on users’ iPhone or iPad until they sync their devices with their computers, after which it’s stored in backup files on iTunes, according to Pete Warden and Alasdair Allan, the researches who discovered the potential privacy problem. With the information being stored on an unencrypted file, anyone who accesses a user’s computer has detailed information about where they and their iPhone or iPad have been, including time-stamped latitude and longitude coordinates.
The location based recording seems to have originated with the release of iOS4 last June. This means users may have unknowingly accumulated a year’s worth of location information on their phones or computers. It also appears that Verizon iPhone users aren’t being affected by this – only the GSM based iPhones are affected for now.
“Apple has made it possible for almost anybody — a jealous spouse, a private detective – with access to your phone or computer to get detailed information about where you’ve been,” Mr. Warden said. This could possibly be bad for those users who haven’t been on their best behavior lately. If they are doing something that they shouldn’t be, they should consider leaving their phone at home.
Apple hasn’t commented on why it is logging all the detailed location data or why the information isn’t in an encrypted file. It’s a good possibility that Apple plans on using this information at some point – who knows when – for social networking services or a targeted marketing plan.
“[Apple] have new features in mind that require a history of your location, but that’s pure speculation. The fact that it’s transferred across devices when you restore or migrate is evidence the data-gathering isn’t accidental,” Mr. Warden said.
But there is a way for users to encrypt the backup files that are stored on their iTunes.
Here’s how you do it:
- Launch iTunes and connect your iPhone to your computer.
- Select your iPhone in the Library list in iTunes, then choose the Summary tab.
- Scroll to the bottom of the window and check Encrypt iPhone backup.
- Enter a password when prompted.
The data on your iPhone, iPod touch or iPad is also stored in an unencrypted format, and the only way to secure that information is to use a passcode lock. Users can do that by going to: Settings > General > Passcode Lock.
For now you can’t stop it, but you can remove the information from your computer by wiping your backup files from your computer. However, at that point you’ll have no backups to restore your phone in case you lose it. If you do lose your phone, all your location based tracking data goes right into the hands of the person who found it. If you decide to wipe out your backup files, every time you sync your phone another file is created, so you would need to wipe that file out every time.