Apple has updated its privacy policy and announced that starting with the release of iOS 27.3, iPadOS 27.3, macOS 27.3, and visionOS 27.3, it will scan the contents of shared files and photos in iCloud for malicious content.
Apple has updated its privacy policy and announced that starting with the release of iOS 27.3, iPadOS 27.3, macOS 27.3, and visionOS 27.3, it will scan the contents of shared files and photos in iCloud for malicious content.
This is stated in the company's official support document.
The changes apply when users share content from iCloud (such as photos or files in iCloud Drive) by selecting the “Anyone with the link” access option.
According to Apple, choosing this mode makes the content available to anyone with the link, including the company itself.
“Starting with versions 27.3 or later for iOS, iPadOS, macOS, and visionOS, content shared using the “Anyone with the link” option will be reviewed by Apple for malicious content,” the document states.
Additionally, the company specifically noted that creating a public link disables End-to-End Encryption (E2EE) for the item. This happens even if the owner or recipients have Advanced Data Protection enabled, which typically protects photos, backups, and notes in iCloud using E2EE.
Apple warns that if harmful content is detected, materials may be removed or deleted at any time.
"Apple may also take action against your Apple Account, including blocking or deactivating it, preventing you from creating a new account with the associated email or phone number, and, if necessary, involving law enforcement," the company emphasized.
However, the document leaves a number of open questions. In particular, Apple does not clearly define what exactly is considered "harmful content" and does not specify whether the scanning will be applied retroactively to links created before the release of the 27.3 updates in December.
