Skip to main content

Apple allegedly found storing ‘deleted’ Safari browsing data in iCloud

How to allow pop-ups on a Mac
Image used with permission by copyright holder
A Russian cybersecurity company has claimed that it can retrieve “deleted” Safari browsing data from iCloud. Elcomsoft, based in Moscow, which makes forensics software, said that it’s possible to find a list of your supposedly deleted Safari browsing habits stored in iCloud for over a year.

According to the firm’s CEO Vladimir Katalov, Apple maintains this data in a file called “tombstone” for the purposes of syncing different devices. Katalov claimed that he made this discovery by accident and used his company’s Phone Breaker software to extract the “deleted” data going back over a year.

“We have found that they stay in the cloud probably forever,” he told Forbes, which also had an independent iOS forensic expert verify the claims. It’s worth pointing out that Apple does not use the term “delete” when it comes to Safari browsing data on your Mac or iPhone. Rather this data is “cleared.”

But nonetheless, privacy and security experts are not pleased with the revelations. Jay Stanley of the American Civil Liberties Union (ACLU) told Forbes that even if this was just a mistake on Apple’s part, it is worrying as data retention is often done by default.

Browsing history is very sensitive and can reveal a lot of about a person, he said, and users may feel less comfortable knowing that the data isn’t truly deleted. “It’s vital that people are able to trust that they can be in control of that kind of information. It’s one reason we advise using search tools that don’t store your history.”

“Any data that’s supposed to be deleted but can still be extracted is always interesting, especially for law enforcement,” added Per Thorsheim, organizer of security conference PasswordsCon, in Elcomsoft’s press release.

Apple has yet to respond to the allegations but Katalov added that once the news first broke this morning, his browsing data started disappearing from his iCloud so it appears some kind of fix has been put in place.

Editors' Recommendations

Jonathan Keane
Former Digital Trends Contributor
Jonathan is a freelance technology journalist living in Dublin, Ireland. He's previously written for publications and sites…
iCloud might be sending your photos to strangers’ computers
Microsoft has released a new Windows 11 feature that makes the OS photos app compatible with Apple's iClould.

Microsoft's newly announced iCloud for Windows app, which is intended to connect your iCloud to your Photos app on your PC, has already developed a glitch that is sending photos to the wrong users.

Several users have reported instances on the MacRumors Forums where they have received someone else's images when attempting to load their iCloud data onto a Windows device, and similarly had their own images sent elsewhere. Some users also detailed receiving corrupted videos that played back only black screens with scan lines. Users began sharing their issues with the app on November 17 after Microsoft unveiled the feature the Wednesday prior.

Read more
Windows 11 will now work more seamlessly with Apple iCloud
A Windows 11 device sits on a table.

Microsoft has now made available a feature for Windows 11 that will make it easy to connect your iCloud to your Photos app on your PC.

The iCloud for Windows app will be downloadable through the Microsoft Store as an add-on update to the Photos app, and it will roll out completely to Windows 11 users by the end of the month, the company said.

Read more
This EU law could force Apple to open up iMessage and the App Store
Someone holding an iPhone 14 with the display turned on.

The EU's Digital Markets Act (or DMA) has gone into force today. It could force Apple to open up the iPhone's iMessage and app-buying platforms to third-party apps and services. Companies that fall afoul of the act could be fined up to 20% of global turnover. Apple has previously criticized the DMA for being a "blunt instrument."

The DMA aims to allow smaller services to compete more equitably with larger ones. This means that companies with a certain number of users, labeled as gatekeepers, would have to make their platforms interoperable with smaller ones. Large platforms like Facebook or iMessage, for example, would be required to open up, while something like Signal could scrape by.

Read more