The Apple Core

Jason D. O'Grady & David Morgenstern

Apple finally responds to Locationgate, but is it enough?

By | April 27, 2011, 6:56pm PDT

Summary: Apple issued a statement today in response to Location-gate. The PR nightmare began when a secret tracking database was discovered, unencrypted, on all iOS 4 devices.

Apple issued a statement today in response to Locationgate. The PR nightmare began when a ”database of Wi-Fi hotspots and cell towers around your current location” (a.k.a. Consolidated.db) was discovered on iOS 4 devices — and the computers they’re backed up to.

The controversy reached a fevered pitch when researchers released a freeware application that plots the (approximate) location of any iPhone or iPad on a map — over the course of a year.

People were understandably upset.

Here’s the full text of Apple’s response:

Apple would like to respond to the questions we have recently received about the gathering and use of location information by our devices.

1. Why is Apple tracking the location of my iPhone?
Apple is not tracking the location of your iPhone. Apple has never done so and has no plans to ever do so.

2. Then why is everyone so concerned about this?
Providing mobile users with fast and accurate location information while preserving their security and privacy has raised some very complex technical issues which are hard to communicate in a soundbite. Users are confused, partly because the creators of this new technology (including Apple) have not provided enough education about these issues to date.

3. Why is my iPhone logging my location?
The iPhone is not logging your location. Rather, it’s maintaining a database of Wi-Fi hotspots and cell towers around your current location, some of which may be located more than one hundred miles away from your iPhone, to help your iPhone rapidly and accurately calculate its location when requested. Calculating a phone’s location using just GPS satellite data can take up to several minutes. iPhone can reduce this time to just a few seconds by using Wi-Fi hotspot and cell tower data to quickly find GPS satellites, and even triangulate its location using just Wi-Fi hotspot and cell tower data when GPS is not available (such as indoors or in basements). These calculations are performed live on the iPhone using a crowd-sourced database of Wi-Fi hotspot and cell tower data that is generated by tens of millions of iPhones sending the geo-tagged locations of nearby Wi-Fi hotspots and cell towers in an anonymous and encrypted form to Apple.

4. Is this crowd-sourced database stored on the iPhone?
The entire crowd-sourced database is too big to store on an iPhone, so we download an appropriate subset (cache) onto each iPhone. This cache is protected but not encrypted, and is backed up in iTunes whenever you back up your iPhone. The backup is encrypted or not, depending on the user settings in iTunes. The location data that researchers are seeing on the iPhone is not the past or present location of the iPhone, but rather the locations of Wi-Fi hotspots and cell towers surrounding the iPhone’s location, which can be more than one hundred miles away from the iPhone. We plan to cease backing up this cache in a software update coming soon (see Software Update section below).

5. Can Apple locate me based on my geo-tagged Wi-Fi hotspot and cell tower data?
No. This data is sent to Apple in an anonymous and encrypted form. Apple cannot identify the source of this data.

6. People have identified up to a year’s worth of location data being stored on the iPhone. Why does my iPhone need so much data in order to assist it in finding my location today?
This data is not the iPhone’s location data—it is a subset (cache) of the crowd-sourced Wi-Fi hotspot and cell tower database which is downloaded from Apple into the iPhone to assist the iPhone in rapidly and accurately calculating location. The reason the iPhone stores so much data is a bug we uncovered and plan to fix shortly (see Software Update section below). We don’t think the iPhone needs to store more than seven days of this data.

7. When I turn off Location Services, why does my iPhone sometimes continue updating its Wi-Fi and cell tower data from Apple’s crowd-sourced database?
It shouldn’t. This is a bug, which we plan to fix shortly (see Software Update section below).

8. What other location data is Apple collecting from the iPhone besides crowd-sourced Wi-Fi hotspot and cell tower data?
Apple is now collecting anonymous traffic data to build a crowd-sourced traffic database with the goal of providing iPhone users an improved traffic service in the next couple of years.

9. Does Apple currently provide any data collected from iPhones to third parties?
We provide anonymous crash logs from users that have opted in to third-party developers to help them debug their apps. Our iAds advertising system can use location as a factor in targeting ads. Location is not shared with any third party or ad unless the user explicitly approves giving the current location to the current ad (for example, to request the ad locate the Target store nearest them).

10. Does Apple believe that personal information security and privacy are important?
Yes, we strongly do. For example, iPhone was the first to ask users to give their permission for each and every app that wanted to use location. Apple will continue to be one of the leaders in strengthening personal information security and privacy.

Software Update
Sometime in the next few weeks Apple will release a free iOS software update that:

  • reduces the size of the crowd-sourced Wi-Fi hotspot and cell tower database cached on the iPhone,
  • ceases backing up this cache, and
  • deletes this cache entirely when Location Services is turned off.

In the next major iOS software release the cache will also be encrypted on the iPhone.

Larry Dignan wonders if it was really a bug, and asks if Google is really any better (or worse).

What’s your take?

Related:

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

Topics

Jason O'Grady is a journalist and author specializing in mobile technology. He has published six books on Apple and mobile gadgets and his PowerPage blog has been publishing for over 15 years.

Disclosure

Jason D. O'Grady

Jason D. O'Grady is the creator and editor of O'Grady's PowerPage, which has been publishing mobile technology news since 1995. He maintains an advertising relationship with the following legacy advertisers on the PowerPage:

  • Amazon Associates
  • Google Adsense
  • Tekserve
  • Advertising on the PowerPage is brokered by a third-party agency (BackBeat Media) and he recuses himself from these negotiations.

Biography

Jason D. O'Grady

Jason D. O'Grady developed an affinity for Apple computers after using the original Lisa, and this affinity turned into a bona-fide obsession when he got the original 128 KB Macintosh in 1984.

He started writing one of the first Web sites about Apple (O'Grady's PowerPage) in 1995 and is considered to be one of the fathers of blogging. He has been a frequent speaker at the Macworld Expo conference and a member of the conference faculty. He also co-founded the first dedicated PowerBook User Group (PPUG) in the United States.

After winning a major legal battle with Apple in 2006, he set the precedent that independent journalists are entitled to the same protections under the First Amendment as members of the mainstream media.

O'Grady is the author of The Nexus One Pocket Guide, The Droid Pocket Guide, The Google Phone Pocket Guide, and The Garmin nuvi Pocket Guide (Peachpit Press), the author of Corporations That Changed the World: Apple Inc. (Greenwood Press), and a contributor to The Mac Bible (Peachpit Press). In addition, he has contributed to numerous Mac publications over the years, including MacWEEK, Macworld, and MacPower (Japan).

When he's not writing about Apple for ZDNet at The Apple Core, he enjoys spending time with his family in New Jersey.

Related Discussions on TechRepublic

Did you know you can take part in these discussions with your ZDNet membership?
10
Comments

Join the conversation!

Just In

RE: Apple finally responds to Locationgate, but is it enough?
ohjackie Updated - 13th Oct
It's scary if there are devices which could track your location, it would be like a spy camera video . You are being spied without your knowledge. I think Apple did this as a mistake and not on purpose. I don't think they would want to lose their customers. That would seem like a painful acl injury to the company. I hope this incident doesn't happen with iOS 5 because if it does, a lot of users might be switching or moving companies .
0 Votes
+ -
It's not a bug. It's by design. Apple designed it that way.
@Dev-Head: ... is the most effective way for cashing and gathering of crowd-sourced database for Assisted part of Assisted-GPS technology.

That design had nothing malicious in mind (Apple does not track anyone, the data is anonymous indeed), but the matter of confidentiality of users was poorly thought. This was the mistake, not the software bugs .

They can not admit publicly that it is design mistake since it is harder to explain technically why the design works currently the way it works (though I understand that, common people not), and because, as any other company, Apple maintains that privacy is the first thing they ever care for in whatever they are doing.
However, as well as with Google numerously in the past, it was not the case with Apple this time.
0 Votes
+ -
Message has been deleted.
davebarnes Updated - 28th Apr 2011
0 Votes
+ -
The whole event is FUD. Apple does not need to track its users. There are certainly location based services which can be useful and desirable, but Apple gives you the option of participating. If the logged data is going to be eliminated, it is a non-issue.

This is in complete contrast, all you Android fan-boys, to Google. They make all their money through targeting advertising, and target their advertising based on spying continuously on their users. Why give them a pass? They are much more invasive in their spying. Apple is not a danger to privacy. Google is the biggest danger of all.
0 Votes
+ -
Bug?
srparent Updated - 28th Apr 2011
It is plausible to think of Apple's woes as bugs, if we remember that "bugs" are not restricted to software code. Missed or undocumented requirements, which is probably what happened here, can be considered software bugs or, more properly, defects.
0 Votes
+ -
It's not enough
Micho1 1st May 2011
I think Apple should of mentioned something about their devices recording this information before releasing ios 4.
http://www.connectapple.com/
Well done! Thank you very much for professional templates and community edition
sesli chat sesli sohbet
0 Votes
+ -
RE: Apple finally responds to Locationgate, but is it enough?
jackson1984-24316069205748857739440257893812 10th Oct
That is all really new to me which submitting severely opened my eyes.Various many thanks for sharing with us your in reebok nfl jerseys formation.
It's scary if there are devices which could track your location, it would be like a spy camera video . You are being spied without your knowledge. I think Apple did this as a mistake and not on purpose. I don't think they would want to lose their customers. That would seem like a painful acl injury to the company. I hope this incident doesn't happen with iOS 5 because if it does, a lot of users might be switching or moving companies .

Join the conversation!

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
ie8 fix

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources
ie8 fix
ie8 fix