A security researcher has found that the iPhone 11 Pro still intermittently collects location data even when the user has blocked it from doing so.
Apple has seemingly admitted this, telling the researcher that this is ‘expected behavior’ …
KrebsOnSecurity identified the issue, made a video showing it happening (below) and reported it to Apple. However, the response from the iPhone maker implies that certain ‘system services’ continue to collect location data even when the user has selected Never for all individual system services and apps.
The policy [says in part]: “You can also disable location-based system services by tapping on System Services and turning off each location-based system service.” But apparently there are some system services on this model (and possibly other iPhone 11 models) which request location data and cannot be disabled by users without completely turning off location services, as the arrow icon still appears periodically even after individually disabling all system services that use location.
To be clear, completely turning off Location Services does work. But if you go into Settings > Privacy > Location Services and individually toggle off every single app, then scroll down to System Services and individually toggle all of those off too, the device will still access your location from time to time.
Apple responded by clearly implying that there are some system services where users don’t get to choose whether or not data is collected.
“We do not see any actual security implications,” an Apple engineer wrote in a response to KrebsOnSecurity. “It is expected behavior that the Location Services icon appears in the status bar when Location Services is enabled. The icon appears for system services that do not have a switch in Settings.”
Apple reportedly didn’t respond to any follow-up questions. We’ve also reached out to Apple and will update with any response. You can watch the video demo below, in which Krebs shows that all individual toggles are off, but the iPhone accesses your location when it connects to WiFi and mobile data.
FTC: We use income earning auto affiliate links. More.