It all lives on your device in order to make it work better. Apple literally doesn’t have custody of the data so it’s not relevant to the GDPR. It’s your data.

▲ coldtea a day ago | parent | next [-]

Also available to any other app with "full disk access" to just read and upload. A permission that make apps ask for and others need to work (e.g. a terminal replacement).

▲

woadwarrior01 6 hours ago | parent | next [-]

Which is why Apple is so skittish about "full disk access".

https://developer.apple.com/news/?id=p6zjojqw

▲

tpmoney 21 hours ago | parent | prev | next [-]

Every piece of data on your computer that is owned by your user is available to any other app you run as your user. That's hardly unique to this data, and is a well known issue when it comes to personal data and the applications you run under the unix permissions model. That this is at least behind the "full disk access" control makes it more protected than something like all of the tax and accounting data your financial software is storing in your Documents or home folder (well, technically under macOS your Documents folder also has its own permission, but it's the same sort of thing where anything with permission to read from your Documents folder can read anything in there).

It's an eternal balancing act because every time Apple implements some new restriction in their OS that prevents apps from doing whatever they want, whenever they want, people get mad at them. But without those restrictions, the ever increasing amount of personal data that is stored on your computer is exposed to the ever increasing number of data slurping applications that you run.

▲

coldtea 15 hours ago | parent | next [-]

>Every piece of data on your computer that is owned by your user is available to any other app you run as your user.

That not being the case is the whole purpose of the per-app sandboxes which macOS has along with TCC. We're not discussing plain Unix permissions alone.

	▲	tpmoney 12 hours ago \| parent [-]
		Ok, and the data is in a location that you need to grant full disk access to an application in order to access it. So what is the complaint here? Is it that if you run an application and give it access to the data that it has access to the data?

▲

hparadiz 15 hours ago | parent | prev [-]

This drives me crazy. I'm slowly working on isolating every application into it's own sandbox but the fact that this wasn't built into the kernel drives me up the wall.

▲

astafrig 16 hours ago | parent | prev [-]

> A permission that make apps ask for and others need to work (e.g. a terminal replacement).

I assume you mean 'many' and not 'make'—this is untrue; you only need to grant FDA if you're trying to access protected areas, like the knowledge graph store.

Granting full disk access to an app that you don't trust not to surreptitiously exfiltrate your data is the kind of user error where the buck stops with PEBCAK.

▲ sneak a day ago | parent | prev [-]

[flagged]

▲ kogir a day ago | parent | next [-]

While not the default, with Advanced Data Protection, iCloud Backup does encrypt backups end to end. It’s available in most jurisdictions.

https://support.apple.com/en-us/102651#advanced

▲ 1over137 a day ago | parent | prev | next [-]

>iCloud Backup, on by default

iCloud is not on by default with macOS. For starters, you have to create an iCloud account!

▲ semiquaver a day ago | parent | prev | next [-]

  > It is safe to assume

No need to assume anything. This data is not included in iCloud backup. That detail is included in the article.

You are misinformed (or speculating) and spreading FUD.

	▲	sneak 21 hours ago \| parent [-]
		> This data is not included in iCloud backup. That detail is included in the article. The word "backup" does not appear at all in that webpage? Your claim is unsubstantiated. For these features to work, they must be running on iOS as well, for people who don't own a mac. Siri is used more on mobile devices than on desktops, generally.

▲ shuckles a day ago | parent | prev [-]

Photos aren’t in iCloud Backup. Have you considered doing the bare minimum to understand the features you complain about?

	▲	sneak 21 hours ago \| parent [-]
		They don't need to be; Photos are synced in realtime to Apple without e2ee. Apple already has them, even faster than the nightly backup.