#Privacy: Facebook, TikTok, and Other Apps Use Push Notifications to Send Data about Your iPhone

This video sheds light on a growing practice among data-hungry apps where they use the background execution time allocated by iOS for the purpose of customizing notifications to send app analytics. Many apps do this. We just picked a few for this demo. Apps on iOS don’t run in the background. iOS doesn’t allow apps to run in the background for a variety of reasons, mostly related to privacy and performance. Although iOS allows apps to run a few background tasks, access to background execution time is very restricted. But starting in iOS 10, iOS added a new feature to allow apps to customize push notifications even if they are not running. iOS wakes the app in the background when it receives a notification and allows the app a limited time to customize the notification before it is presented to the user. This includes decrypting an encrypted payload and downloading additional content to enrich the notification. Once the app hands in the customized notification to the system or the background time allocated runs out, the app is terminated. This feature is now being widely used by data-hungry apps to send analytics during this background time. The analytics include unique signals about the user’s device that allow for fingerprinting and tracking users across different apps developed by different developers. Apple does not allow fingerprinting. To counter fingerprinting, Apple is going to require developers to declare why their apps need access to required reason APIs, or APIs that provide signals commonly used for fingerprinting. Chapters: 00:00 Introduction 01:44 TikTok 02:26 TikTok Uptime 02:42 Facebook 02:56 Facebook Uptime 03:29 X 04:08 X Uptime 04:23 LinkedIn 05:03 Bing 05:32 Final Words Peppered with Notifications For more content like this, you can find us here: Twitter/X: @mysk_co Mastodon: @mysk Threads: @mysk_co #privacy #cybersecurity #iphone #iOS #security #infosec A few links .. Required Reason APIs: Apple Notifications: Notification Service Extension: