Protecting app access to user data

In addition to encrypting data at rest, Apple devices help prevent apps from accessing a user’s personal information without permission using various technologies including Data Vault. In Settings in iOS, iPadOS and visionOS, and in macOS System Settings (macOS 13 or later) or System Preferences (macOS 12 or earlier), users can see which apps they’ve permitted to access certain information, as well as grant or revoke any future access. Access is enforced in the following cases:

iOS, iPadOS, macOS, visionOS: Calendars, Camera, Contacts, Microphone, Photos, Reminders and Speech recognition
iOS, iPadOS, visionOS: Bluetooth, Home, Media, Media apps and Apple Music, Motion and fitness
iOS, watchOS: Health
macOS: Input monitoring (for example, keyboard strokes), Prompt, Screen recording (for example, static screen shots and video), and System Settings (macOS 13 or later) or System Preferences (macOS 12 or earlier)

On devices with iPadOS 13.4 or later and iOS 13.4 or later, all third-party apps automatically have their data protected in a Data Vault. Data Vault helps protect against unauthorised access to the data, even from processes that aren’t themselves sandboxed. Additional classes in iOS 15 and iPadOS 15 or later include Local Network, Nearby Interactions, Research Sensor & Usage Data, and Focus.

If the user signs in to iCloud, apps in iOS and iPadOS are granted access to iCloud Drive by default. Users may control each app’s access under iCloud in Settings. iOS and iPadOS also provide restrictions designed to prevent data movement between apps and accounts installed by a device management service and those installed by the user.

ସହାୟକ କି?

Apple Platform Security

Protecting app access to user data