December 7, 2023 at 06:06AM
U.S. Senator Ron Wyden revealed that governments have demanded mobile push notification data from Apple and Google. Such notifications pass through Apple and Google’s systems, potentially exposing app usage. Apple and Google confirmed receipt of requests but lacked transparency. Wyden urged them to disclose aggregate request statistics and inform affected customers.
Meeting Takeaway Summary:
– Governments have been requesting mobile push notification records from Apple and Google users.
– Senator Ron Wyden highlighted that these tech giants could be compelled to provide user information based on the way phone operating systems manage push notifications.
– Both companies have visibility into their customers’ app usage because notifications pass through their infrastructure.
– Push notifications use the Apple Push Notification (APN) service for iOS and Firebase Cloud Messaging for Android. Microsoft and Amazon have similar services with WNS and ADM, respectively.
– Apple and Google confirmed receiving requests to hand over notification data but are restricted from making this public by the U.S. government.
– The U.S. is among the governments seeking data, with evidence of federal requests for push notification data found in over two dozen search warrant applications.
– The collected data comprises metadata about the app and notification timing, the related phone, and the Apple or Google account. Sometimes, it may include unencrypted content like the actual message content of the notification.
– Senator Wyden suggests that Apple and Google should be allowed to disclose their assistance in these data requests, publish the aggregate number of demands, and notify customers when their data is demanded.
– Apple stated a recent letter gave them the opportunity to disclose more information and updated their Legal Process Guidelines to reflect this.
– Google claimed to already include such information in transparency reports, though not currently separated by the type of data request.
– The content emphasizes the importance of transparency in how push notification data and user monitoring by governments are managed and reported by tech companies.
Action Items:
– Monitor for updates from Apple and Google regarding their disclosures of government data requests.
– Keep informed about legislative developments that may affect data privacy and security practices.
– Consider reviewing and updating privacy policies and practices in line with emerging information and regulatory guidelines.