Apple has removed security features from iPhones in the UK, in a major and unprecedented move.
The change comes amid reports that the UK government had asked Apple to introduce a “backdoor” into its devices, which would allow intelligence agencies to spy on all of its users. That order is secret, meaning that neither Apple or the UK’s Home Office have commented on whether or not it exists, but both the BBC and the Wall Street Journal have reported on its existence.
Apple did not comment on whether the removal of the feature was related to those reports but said it was “gravely disappointed” that it would no longer be able to offer it in the UK.
“Apple remains committed to offering our users the highest level of security for their personal data and are hopeful that we will be able to do so in the future in the United Kingdom,” it said in a statement. “As we have said many times before, we have never built a backdoor or master key to any of our products or services and we never will.”
Apple’s Advanced Data Protection feature lets users encrypt their personal data when it is stored online on the company’s servers. It means that when files such as photos or messages are backed up, not even Apple is able to see them, despite hosting them.
As with all of Apple’s encryption tools, that feature has led to criticism from intelligence agencies and others who argue that it stops them from asking criminals data.
But experts warned that both the original reported order and now Apple’s decision to pull the feature will put users in danger.
Dray Agha, senior manager of security operations at cybersecurity firm Huntress said: “Apple’s decision to pull Advanced Data Protection in the UK is a direct response to increasing Government demands for access to encrypted user data.
“Weakening encryption not only makes UK users more vulnerable to cyber threats but also sets a dangerous precedent for global privacy.
“Governments argue this helps law enforcement, but history shows that any backdoor created for one party can eventually be exploited by bad actors.
“The broader concern is that this move could pressure other companies to weaken their security, putting personal data worldwide at greater risk.”
Privacy campaigners said that the effects of the decision would echo more broadly.
“This decision by Apple is the regrettable consequence of the Home Office’s outrageous order attempting to force Apple to breach encryption. As a result, from today Apple’s UK customers are less safe and secure than they were yesterday – and this will quickly prove to have much wider implications for internet users in the UK,” said Rebecca Vincent from privacy and civil liberties campaign group Big Brother Watch, Rebecca Vincent.
“No matter how this is framed, there is simply no such thing as a “back door” that can be limited only to criminals or that can be kept safe from hackers or foreign adversaries. Once encryption is broken for anyone, it’s broken for everyone, and as we have cautioned: this will not stop with Apple.
“We once again call on the Home Office to immediately rescind this draconian order and cease attempts to break encryption before the privacy rights of millions are eroded and the UK further ostracises itself from other democracies around the world.”