Please create an account to participate in the Slashdot moderation system

 



Forgot your password?
typodupeerror
×
IOS Iphone Privacy

iPhone Update Reminds Users -- Again and Again -- of Being Tracked (wsj.com) 122

Some app developers are concerned that frequent iOS 13 notifications will scare users away. From a report: "'Facebook' has used your location 107 times in the background over the past 3 days. Do you want to continue to allow background location use?" Such pop-up notifications are frequent for many iPhone users who have downloaded Apple's iOS 13. They arrive every few days for each app that tracks location while not in use and includes maps. Apple touted the new notifications as a way to make users more mindful of how much tracking goes on even when they aren't using their phones. Each notification gives users the option to let the app use their location data only when it is in use or if they agree for the app to track their locations at all times. Since iOS 13 was released in September, tens of millions of people have moved to block apps' ability to track their locations when not in use, according to an estimate from Location Sciences, a company that verifies mobile location data.

Some app developers, particularly the ones whose business models rely on being able to access users' locations at all times, are concerned that the iOS 13 notifications will hurt their apps' adoption. Seven of them signed an email to Apple Chief Executive Tim Cook addressing these concerns in August. The signatories included Life360, an app that lets family members track one another's location and can summon an ambulance immediately in the event of an auto accident, and Tile, a maker of tracking devices for items like wallets and keys. Both Life360 and Tile rely on constantly tracking all their users and compete with Find My, a preinstalled Apple app that helps users locate a lost iPhone -- and isn't subject to the same notifications. [...] Apple's iOS 13 location-tracking changes have hit the supply of mobile location data available for advertising and analytics, said Jason Smith, chief business officer of Location Sciences. He said the amount of location data gathered by apps while not in use had dropped by 70% since iOS 13 was released.

This discussion has been archived. No new comments can be posted.

iPhone Update Reminds Users -- Again and Again -- of Being Tracked

Comments Filter:
  • Thank you Apple (Score:5, Insightful)

    by ceoyoyo ( 59147 ) on Monday January 06, 2020 @01:55PM (#59592790)

    'Facebook' has used your location 107 times in the background over the past 3 days. Do you want to continue to allow background location use?"

    Thank you Apple, no I do not want fucking Facebook using my location in the background.

    Some app developers don't like this feature? I'm shocked.

    • by dgatwood ( 11270 )

      It's a little more problematic for things like map software that does turn-by-turn in the background, of course. So I suspect that there are some app developers who don't like this for legitimate reasons, too.

      • by ceoyoyo ( 59147 )

        I suppose if you think your users are absolute twits who would object to hearing that their mapping software uses their GPS.

        So we've got app developers who are (1) up to no good and (2) think their users are absolute twits. Anything else?

        • by dgatwood ( 11270 )

          (3) People who don't understand the way users use their devices in the real world.

          The problem with the changes Apple recently made is that their "helpful" reminder is something that the user isn't expecting to see, and they frequently knee-jerk react to it without thinking. And once they tap the button to disable background location access, they have to manually go into settings to fix it. That change often subtly breaks the behavior of apps, and then when users complain, they don't complain about iOS.

          • by BranMan ( 29917 )

            Sorry - I call bullshit on this one. IAASD (I am a software developer), and as one of those I can say that if the behavior is broken (subtly or not) when background location services are off, then the App is broken.

            That use case must be tested as thoroughly as any other. Not doing so is shoddy development, and should not be tolerated. As such, YES - the APP is BROKEN. They didn't do their job.

            If there is no way the App can function intelligently without background location services, then the App needs t

      • It's a little more problematic for things like map software that does turn-by-turn in the background, of course.

        If you're running such software, you can say "Yes" when iOS prompts you about it. It seems to prompt only a couple times before deciding you really want that app to have location tracking.

      • It's a little more problematic for things like map software that does turn-by-turn in the background, of course.

        Not even a little, because when they are done navigating they can turn off location updates.

        It's only apps that have constant location updates in the background, because they have asked the system to keep sending them, that have this message show up for.

        Sure there are some apps that really do need this but frankly as a user I still like to be reminded it is happening, and it makes app developers m

      • It's a little more problematic for things like map software that does turn-by-turn in the background, of course. So I suspect that there are some app developers who don't like this for legitimate reasons, too.

        From what I understand, navigating to Settings >> Privacy >> Location Services >> $AppName will allow you to individually "Whitelist" an App as far as Location Services goes.

        I'm pretty sure this just applies to when an iOS pops up a Notification when an App asks for Location Services and you Temporarily grant the Permission, even if you chose "Always Allow".

        So, it "saves" Users from making a hasty decision that affects their Privacy forever, but still allows Users to make a deliberate choi

        • by dgatwood ( 11270 )

          So, it "saves" Users from making a hasty decision that affects their Privacy forever, but still allows Users to make a deliberate choice to allow continuous Tracking, by having the "Always" Setting in "Settings" stand as a permanent (unless you change it) "Whitelist".

          And instead, it causes users to make a hasty decision that affects app functionality forever, because they don't understand how to turn it back on. It's not the concept that I object to in principle, but rather the implementation. :-)

      • by tlhIngan ( 30335 )

        It's a little more problematic for things like map software that does turn-by-turn in the background, of course. So I suspect that there are some app developers who don't like this for legitimate reasons, too.

        Yes. The reason is simple.

        If an app needs location services, the OS will pop up a dialog asking if you want to always allow, only in foreground or deny location services.

        Problem is, people forget they did this, and Apple treats it as a temporary permission. So it's more like "Hey, a few days ago you sa

    • I can think of four possible states for these notifications.
      • A. Always allow tracking. Don't bother me about it anymore because I know what I'm doing and I'm OK with it. Things like Maps (silent traffic data collection in the background).
      • B. Allow tracking, but remind me occasionally because I might want to disable it.
      • C. Disallow tracking, but remind me whenever the app tries to do it, because I sometimes want to enable it. Things like exercise apps, which you want to know your location when you're acti
      • Apple seems to have decided to only allow state B of the two "allow" states (eliminating state A).

        As an actual IOS user, it does not feel like that is the case.

        Like for some apps that require always on background access, the reminder does not really occur in a way or a time that is annoying. Or possibly after a few allows the duration between prompts goes much longer.

        But regardless, what they have done has the end effect of seeming like there is a state B and a state A.

        And believe me, I am VERY annoyed my h

      • by ceoyoyo ( 59147 )

        What? iOS has four levels of access to location data:

        1) Never
        2) Ask Next Time
        3) While Using the App
        4) Always

        Those are copied verbatim off my phone. They're identical to your list, except #3, while using the app but *not* in the background, is far more useful than your (B). There is also a status bar indicator when your location is being used by an app, which would add any functionality that might be in your (B) but in a much better way.

        I guess your understanding comes from reading the summary and making ass

  • No (Score:5, Insightful)

    by dissy ( 172727 ) on Monday January 06, 2020 @02:01PM (#59592818)

    Some app developers are concerned that frequent iOS 13 notifications will scare users away.

    No fam, not even close.

    Those developers are concerned and scared that frequent location data queries they are doing will scare users away.
    Perhaps those developers should reconsider their life choices if they believe this is a problem.

    an app that lets family members track one another's location and can summon an ambulance immediately in the event of an auto accident

    Why is that a problem? All of the family members using this know they are using it, right?
    All of them are fully aware that's why the app was installed, and this is its purpose, right?

    Seeing that the app works as intended should be a good thing then.

    and Tile, a maker of tracking devices for items like wallets and keys.

    That's because you don't put a phone on your wallet and keys, you put a special tag on them the phone can track.
    Again, a tag the phone can track, not a phone the tag can track when the phone isn't open.

    Why are you tracking my phone when it is locked, instead of tracking the things with tags?
    Why is this happening when that app is closed down?
    If the app isn't running and the phone is locked, I can't very well be looking at the map it shows my location on.
    Yet you are scared I'd know you are tracking me when not needed to be. Yea, good. You should be.

    • by clive27 ( 889511 )
      Tile works by having any smartphones with their app detect the lost Tile and notify the location of the Tile to the server. Without tracking the location of the smartphone, server won't know where the lost device is found.
      • by shilly ( 142940 )

        Surely if smartphone B with the app installed finds a lost Tile belonging to smartphone A, smartphone B's app ought to be pulled into the foreground and ask the owner if they're OK with sending their location to the owner of smartphone A?

    • by raymorris ( 2726007 ) on Monday January 06, 2020 @02:35PM (#59592944) Journal

      The reason Tile works the way it does is because you don't want to have to charge your wallet and keys every day. You also don't want to have a data plan for them, and pay $100 for each tag.

      Instead of putting a GPS and 4G radio on your keychain, the tag on my keychain, wallet, and dog uses Bluetooth Low Energy, a low-power, short-range protocol that can go a year on a "watch battery". Every X minutes they check in with the phone, meaning they are within about 50 feet of the phone. That's how I can find that I left my wallet at the restaurant.

      If I can't find them inside the restaurant, I click the button on the app and as long as I'm within 50 feet the tag starts beeping.

      That's why it's setup the way it is - so you don't have to attach a phone to your keychain, just a little BLE tag that communicates with your phone every few minutes. No need to charge your wallet, keys, and dog every night, because it doesn't talk to a tower 40 miles away.

      A cool thing about Tile is that if I press my the button saying that my keys or dog are lost, it'll let me know the location of my lost item when any OTHER Tile user comes within 50 feet of it. That's very helpful if the item moved after it was neae my phone.

      Tile did it right for the application. Doing it right does mean using the GPS on your phone, not having a GPS I your wallet, another GPS on your keychain, etc. Note that your idea does NOT enhance privacy either - if you're tracking my wallet, you know where I am just as much as if you use the GPS I my phone.

      • SO the ONLY thing you need the actual TIle service for is so other users can see your tile, right? Seems like a huge trove of data you are giving them in exchange for a pretty paltry return. The entire setup could run offline if not for that feature.
        • Yeah it could run locally except for:

          1. the community finding feature (find my item if its not where my phone last saw it)
          2. Finding my phone
          3. I forgot the third one, another minor feature

          The first, and so far only, time I've needed to use Tile, I had turned off Bluetooth by habit. I used to turn it off to save battery, before I had Tile. Fortunately someone ELSE in the restaurant had Tile, so I was able to verify the location of my wallet.

          Someone could, and perhaps has, made a good open source applicati

          • by AmiMoJo ( 196126 )

            It's fine until they go bust and the administrator decides that the "anonymous" data is actually very valuable and should be sold off.

            Even GDPR doesn't provide adequate protection for anonymous (not really) data. Correlate with a few other data points and they can figure out who user #84629564 is.

            • > Correlate with a few other data points and they can figure out who user #84629564 is.

              It's me! I went to Taco Bell. I don't think I did myself any harm by posting that for all to read.

              At work, one of my tasks right now is to go through a huge list of security risks and assess what the damage, or consequences, of each would be. One system has a few dozen customer credit card numbers in it. What's tue damage if bad guys get in that? Accounting has social security numbers and birthdates for thousands o

          • Why would your wallet, phone or keys not be in your hand or your pocket, though?

            That's what I don't get about these 'tools'.

            At home, all are on the dresser or bedside table.

            It's just a matter of forming a habit and ... you're set.

            No cost, no privacy risk, no need to change watch batteries annually.

            • My keys sometimes fall out of my pocket.
              With my money ass, sitting on my wallet is uncomfortable.

              Maybe it's time for a purse. It's too bad fanny packs went out of style. They were handy.

      • by dissy ( 172727 )

        A cool thing about Tile is that if I press my the button saying that my keys or dog are lost, it'll let me know the location of my lost item when any OTHER Tile user comes within 50 feet of it. That's very helpful if the item moved after it was neae my phone.

        OK, that makes a lot more sense as a legit feature.
        Fair enough, I can see why Tile may be worried people can now choose not to participate in their mesh and reduce the usefulness of the service.

        That said, I still think it is a better situation now, even if at Tiles expense.

        I would certainly hit "Yes Always" on that prompt to allow GPS and not get the reminder popups.
        My prior thinking, not being a Tile user, would have followed my usual.
        I only hit "Yes" and try it out, and any unexpected prompts after would

      • by mark-t ( 151149 )

        A cool thing about Tile is that if I press my the button saying that my keys or dog are lost, it'll let me know the location of my lost item when any OTHER Tile user comes within 50 feet of it.

        While this might be darn convenient for finding lost articles, doesn't that your mean that the tile is also broadcasting its existence to all tile users near it at regular intervals any time that it isn't connected to your phone, and why couldn't that be used by others to find your lost item before you do?

        • Someone else could make an app which detects whether there are any Tile tags within about 100-300 feet. In fact, here is the source code of a function to do exactly that:

          function tileIsNearby() {
          return true;
          }

          They could see that a tile is in the vicinity - that's pretty much always true if you're out in public. At the grocery store, SOMEBODY has a Tile on their keys, wallet, or whatever.

          They can't trigger the beeping from a Tile they don't own, so they don't know exactly where it is.

          • by mark-t ( 151149 )
            Your trivial function does not identify *which* tags are nearby... which is essential if the owner of the tile is expected to be able to find it by accessing locations of any app users that happen to be near it.

            Also, if it could obtain the tag's ID, then you could determine if any of the tags in range in a relativefly public place are not moving for a long period of time, and are therefore likely misplaced rather than in a person's possession.

            • I like where you are heading with this. Every month I try to give a talk about a security-related topic. Maybe we can develop this idea into something worth talking about.

              So, maybe they can get the serial number of the tile.
              There could be encryption used so they can't, but let us assume they can.

              If they see it the same Tile in the same area repeatedly, such as a restaurant, it's probably either someone who works there, a lost Tile, or some keys that stay at the location, such as the restaurant.

              By default,

              • by mark-t ( 151149 )

                Yeah you could probably find someone's lost item in a park or something...

                Or a parking lot... say for a shopping mall. If it's not moving for more than a few minutes, then it's probably not on someone. Maybe it's inside of a car, but maybe not.

            • by Strider- ( 39683 )

              You can do this even if the tile wasn’t cooperating. It’s a BTLE device, so it’s making some noise on bluetooth, complete with its MAC address. This is no different than tracking anything else that is either sending data via bluetooth or wifi.

    • by jeremyp ( 130771 )

      That's what I thought about Tile. You are supposed to track the Tile not me. However, think about how it must work. Unless the Tile has a GPS receiver of its own and access to a network, either WiFi or mobile, it must rely on a paired phone to record its location. In fact, looking at their web site, it's obvious that's how it works. The "how it works page" includes:

      If your Tile is truly lost, just activate the Tile community and every phone running the Tile app can help you find it

      It's obvious the devices don't know where they are, they just talk to nearby phones over bluetooth.

    • Why is that a problem? All of the family members using this know they are using it, right?
      All of them are fully aware that's why the app was installed, and this is its purpose, right?

      Mom and Dad say "We'll buy you a phone, but you have to run this".
      Kid says, grudgingly, 'OK'.
      Kid his the "no" to location tracking prompt sometime later.

      Devs are worried Mom and Dad will blame them for the tracking failure, instead of their darling little angel who would never do something they are not supposed to do.

    • by Strider- ( 39683 )

      Again, a tag the phone can track, not a phone the tag can track when the phone isn't open.

      The idea is that not only does your phone know its location the last time it was in proximity, you can also help others find missing items.

      Let’s say that you’re out for a run in the park (I know, this is slashdot, hard to believe) and your keys fall out of your pocket. You get home and discover they’re missing. Because the app grabbed your location, you can look up the best place to start your search.

      Ok let’s say you go for a run without your phone. (I know lots of people who do this

    • Not apologizing for them, (because I think itâ(TM)s awful) but just to answer your question, the way those tags work are that theyâ(TM)re just a dumb RFID / NFC / BLE chip, broadcasting a unique serial number, they dont actually do any location tracking themselves. Any time a device running the tracking app sees one of these tags, that device sends its own location to the server. So it does legitimately rely on people letting themselves be tracked at all times. In heavily populated areas it kind
    • by ljw1004 ( 764174 )

      [and Tile, a maker of tracking devices for items like wallets and keys.]
      That's because you don't put a phone on your wallet and keys, you put a special tag on them the phone can track.
      Again, a tag the phone can track, not a phone the tag can track when the phone isn't open. Why are you tracking my phone when it is locked, instead of tracking the things with tags?

      I looked into Tile a few months ago. Tile sells itself via two features. (1) A way to use your phone to find your tagged items: you click on the Tile app on your phone, and the tagged item beeps, and the phone shows a map of where it is. The summary only described this feature, and you responded to it. (2) a way to use your tagged items to find your phone: you click on your physical tile, and your phone beeps, and the tile website shows a map of where it is. Obviously they need location data to do this.

      Inde

    • The reason apps like Tiles want to use your location all the time is because they rely on crowdsourcing. Everyone using the app is helping other Tile users find their shit that isn't close enough for bluetooth to see from their phone. They're using your phone to find Tiles from other people and vice versa.

      It's just another example of a business using your stuff to help their business make money.

  • by WillAffleckUW ( 858324 ) on Monday January 06, 2020 @02:11PM (#59592866) Homepage Journal

    Oh, and yes, now both your toaster and your toilet are tracking you (CES2020 ftw!)

  • by Nkwe ( 604125 ) on Monday January 06, 2020 @02:24PM (#59592918)
    I am not an iPhone user, but I would love to have this feature on Android. I would like the pop up to say "Application xxx has asked for your location yyy times since zzz time. Do you want to continue to allow this?" And have the options be Yes, No, "Don't ask me again for this application", and "take me to the system-wide configuration setting that specifies the nag interval"
    • My son had Life360 on his Android phone, and he did receive notifications that it was tracking his location. I don't recall that any option was presented to silence the notifications.
    • I just saw this pop up on Android 10.0. I'm getting these now.
      • Hmmm Calif. just passed the new data privacy laws ... I wonder if this is part of the compliance. Let users know whos tracking them... If so at least you know now.

    • by sinij ( 911942 )

      I am not an iPhone user, but I would love to have this feature on Android.

      This feature is not on Android and likely never going to be on Android because Google, unlike Apple, makes money from tracking everything, including location, about you. If they make such feature available, they will have to exclude it from self-reporting on baked-in Android functionality.

      • by sad_ ( 7868 )

        so? they'll report tracking from apps except those from google.

        • by sinij ( 911942 )
          This will put non-Google apps at competitive disadvantage, making Google even more dominant while doing nothing to improve privacy.
    • by MobyDisk ( 75490 )

      When an Android app requests location access, there are 3 options in the pop-up:
      * Allow While Using App
      * Allow Once
      * Don't Allow

      So while it doesn't remind you, it did ask you up front it you wanted the app to always track you.

  • I don't have facebook or messenger on my iPhone for that very reason!!!

  • "Apple's iOS 13 location-tracking changes have hit the supply of mobile location data available for advertising and analytics"

    Mission accomplished.

    This is a feature with side effects, not a bug.

    That said, there is room for Apple to let apps override these notifications under certain circumstances and conditions.

    At a minimum, this should include:

    * no retention or sharing of data with third parties beyond the minimum needed for the customer's use of the app
    * The app or its vendor will make the tracking histor

  • I am not updating to next ios even if Tim agrees with those emails. NOTE: I didn't get any notification since I don't use such apps (Social media, friends&family, tracking things etc). :) Feels good.
    • by psergiu ( 67614 )

      I'm still running 12.4.1 and i already got the notification for a newly installed app.

  • finally a good feature!
  • If I grant Google Maps permission, i DO NOT need apple checking on that permission multiple times. I set the fucking thing, now respect my command.
  • Facebook is an app? Oh, I thought it was a web site. If I mistakenly forget to open a web site in incognito mode, then that site might prompt me if it can use my location. If so, I click deny. I have never come across a reason to do otherwise. I suppose the location tracking feature could be useful say.... for someone who is handicapped and finds it hard to enter their zip code into the Target web site to find the nearest store.

  • Apple really *does* seem to care about privacy, which is almost enough to make me switch.

    Android...yeah, you can turn that stuff off, and I do, but Google is a data-mining company. Just owning an Android at all is giving Google data. It simply can't be avoided.

    If only iPhones would allow just a *little* more customization of the interface, I would switch, I think.

  • ...though apps aren't allowed to by default, so you have to enable it.
    Of course, I'm talking about the non-Google Android...

  • I like it when they get it right. Educate the users, allow them to make a choice... it is their data.

  • Let's do a little thought exercise.

    Imagine you're a world leader, cheating on your wife, and you use an unsecured iPhone.

    Now assume your second mistress, thinking you're cheating on her with some Russian guy, decides to make sure of it, and shows you a cool app that has dancing cat memes (provided by a nice guy in Iran). She does the download for you, because you have really tiny hands, and swipes ok about the privacy notice while she distracts you with a double scoop ice cream cone.

    Don't you want to be not

  • Between this and the recent articles griping about ISPs and Web Browsers not being able to track Netflix [hollywoodreporter.com] because they dare to encrpyt their traffic, I'm starting to think these companies are getting desperate and trying to convince the public that privacy and not being able to spy on users is a bad thing.
  • .. then its not a viable business model and they should go out of business, under GDPR, CA's laws, and the entire Self-sovereign identity push-back.

Experiments must be reproducible; they should all fail in the same way.

Working...