> Isn't basically all your data, everything you type being sent to Apple? No. And I have looked. Apple is very up front about the features that do and don't t

> Isn't basically all your data, everything you type being sent to Apple? No. And I have looked. Apple is very up front about the features that do and don't talk to the mothership. It has been a while, but I recall that as you go through the setup process, there's always info available telling you when they'll see your info, and more info online. But it tends to be pretty obvious - Apple has slurped up sensitive data before[1], but it did look like an accident, they fixed it, and were forthcoming about what happened. They're very clear that security related stuff (Secure Enclave - the thumbprint/faceprint data) never leaves the device. Things I know that talk back: - App store (obviously, and they care about analytics) - News app (ditto, it is basically a thin web browser) - iCloud (ditto, clearly, and pay attention to the various modes for encryption: IIRC, you need 2FA enabled for the encryption key to not be recoverable on their end. But you should double check for yourself, I don't use iCloud, so I haven't paid attention.) And looking at my phone on my local net with Wireshark, I also see some chatter that looks like things saving config information, similar to what you see on a Mac. I'm guessing this is them just not being careful - they want everyone backing up to iCloud, and even though I don't, various daemons keep nattering. I block all that stuff when on wifi (both Mac and iOS), with zero problems. On iOS, you mainly need to be concerned with third-party apps. Some of them build in shady libraries for adtech shitheads, do stupid things with analytic/instrumentation libs, etc. The ecosystem seems less bad than Android, at least. As close to a bottom line as I can come: turn off cloud backup and the syncing crap, use 2FA, don't download sketchy free games that ship your data to some guy in Romania, and you're leaking significantly less than on Android. Take more precautions (a content filter/ad blocker more aggressive than the defaults, disable wifi and bluetooth to avoid snoops along wherever you go, run your own mail/calendaring, etc.) and you're in pretty good shape, relatively speaking, and depending on your threat model. [1] IIRC, location data was being logged such that it ended up being sent back in crash reports.