4 ms·

Has there been any indication that health data and the associated sensitive information are leaving the device without the user's consent? They would run afoul

Has there been any indication that health data and the associated sensitive information are leaving the device without the user's consent? They would run afoul of quite a lot of laws and regulations in all western jurisdictions the moment they do that. AFAIK, except when you enrol in a study, none of that depends on network access.

amelius 5y ago
When there is an indication, then it's already too late. The trust you have in the system is not the trust I have.
- kergonath 5y ago
  Well yeah, but without observable facts, this is just wild guesses or paranoia. Considering the regular news about weaknesses in anything from Safari to iMessages, I have a really hard time taking these claims seriously. The storage and processing of health data is documented, and they do not leave the device or the Secure Enclave (unless you accept it, e.g. during a study).
  - amelius 5y ago
    > Well yeah, but without observable facts, this is just wild guesses or paranoia. Not at all. What you are saying is that you don't want to lock the front-door because nobody has illegally entered your house yet. In contrast, I want to lock my front-door for obvious reasons. No paranoia. It's just a different mentality of dealing with security.
rlaabs 5y ago
According to a security researcher[1], a 0-day in Analyticsd allowed any installed app to access the users health data. [1] https://habr.com/en/post/579714/ https://habr.com/en/post/579714/ EDIT: Found the link to the previous HN discussion about this: https://news.ycombinator.com/item?id=28637276 https://news.ycombinator.com/item?id=28637276
- propogandist 5y ago
  the health and PII data making its way to log data may give Apple legal cover to ingest the data "accidentally", also. Recall that Google got to claim their street view cars wardriving was unintentional, and just paid $13M to make it go away, after using the data for about a decade [1] https://www.cnn.com/2019/07/22/tech/google-street-view-privacy-lawsuit-settlement/index.html https://www.cnn.com/2019/07/22/tech/google-street-view-priva...

amelius 5y ago

When there is an indication, then it's already too late. The trust you have in the system is not the trust I have.

kergonath 5y ago
Well yeah, but without observable facts, this is just wild guesses or paranoia. Considering the regular news about weaknesses in anything from Safari to iMessages, I have a really hard time taking these claims seriously. The storage and processing of health data is documented, and they do not leave the device or the Secure Enclave (unless you accept it, e.g. during a study).
- amelius 5y ago
  > Well yeah, but without observable facts, this is just wild guesses or paranoia. Not at all. What you are saying is that you don't want to lock the front-door because nobody has illegally entered your house yet. In contrast, I want to lock my front-door for obvious reasons. No paranoia. It's just a different mentality of dealing with security.

rlaabs 5y ago

According to a security researcher[1], a 0-day in Analyticsd allowed any installed app to access the users health data. [1] https://habr.com/en/post/579714/ https://habr.com/en/post/579714/ EDIT: Found the link to the previous HN discussion about this: https://news.ycombinator.com/item?id=28637276 https://news.ycombinator.com/item?id=28637276

propogandist 5y ago
the health and PII data making its way to log data may give Apple legal cover to ingest the data "accidentally", also. Recall that Google got to claim their street view cars wardriving was unintentional, and just paid $13M to make it go away, after using the data for about a decade [1] https://www.cnn.com/2019/07/22/tech/google-street-view-privacy-lawsuit-settlement/index.html https://www.cnn.com/2019/07/22/tech/google-street-view-priva...