2021-08
On-device detection announced
The operator announced a system to match material against known hashes on the device before upload to its cloud service, together with communication-safety features for child accounts. [1]
Apple
apple.com
D
Deficient
The operator built and then withdrew an on-device detection system in 2022, and reports to NCMEC at volumes far below comparable cloud storage providers. Product-level protections for minors are among the strongest assessed; detection and reporting are among the weakest.
- Domain
- apple.com
- Category
- Devices & cloud
- Last review
- 2026-03-28
Detection & scanning
Whether known and novel abuse material is found at all, and across which surfaces of the product.
1.01 Neutral
Hash matching on publicly posted media
No published description of matching applied to material stored in the consumer cloud service.
1.02 Fail
Hash matching on private messages and attachments
Messaging is end-to-end encrypted with no server-side matching. On-device matching was announced in 2021 and abandoned in 2022. [1] [2]
1.03 Fail
Classifier detection of previously unseen material
No classifier programme for previously unseen material described.
1.04 Neutral
Detection applied to live and streamed video
Not assessed.
1.05 Neutral
Detection of grooming and solicitation in text
On-device nudity detection warns minors in the messaging app. It is a warning to the child, not a detection signal to the operator. [3]
1.06 Neutral
Participation in industry hash-sharing programmes
Participation not publicly described.
Reporting & transparency
What the operator tells NCMEC, law enforcement and the public, and whether those disclosures can be checked.
2.01 Neutral
Files CyberTipline reports to NCMEC
Files CyberTipline reports at volumes several orders of magnitude below other providers of comparable storage scale. [4]
2.02 Fail
Publishes child-safety enforcement figures
Transparency reporting does not break out child-safety enforcement.
2.03 Neutral
Report quality sufficient for investigation
Not assessed.
2.04 Neutral
Reporting cadence and timeliness
Not assessed.
Response & enforcement
What happens after material is found: how fast it comes down, what happens to the account, and whether the decision can be contested.
3.01 Neutral
Time to removal of confirmed material
No figure published.
3.02 Pass
Account termination on confirmed violation
Terms provide for account termination.
3.03 Neutral
Prevention of re-registration
Hardware and payment identity make re-registration harder than on most assessed platforms, but this is a side effect rather than a stated control.
3.04 Neutral
Preservation of evidence
Preservation on legal request is documented.
3.05 Pass
Escalation of imminent-harm cases
An emergency request process is published with a stated turnaround.
Product & policy posture
The design decisions that determine how much abuse is possible in the first place, before any detection is applied.
4.01 Pass
Protective defaults for minor accounts
Child accounts are a distinct type with restricted defaults enforced at the operating-system level. [3]
4.02 Pass
Restrictions on adult-initiated contact with minors
Communication limits restrict who can contact a child account. [3]
4.03 Neutral
Age assurance at registration
Family organiser establishes the account age. Standalone accounts remain self-declared.
4.04 Neutral
Recommendation systems assessed for minor-safety harm
App review governs distribution. No published minor-safety assessment of editorial or recommendation surfaces.
4.05 Fail
Encryption posture and stated mitigations
End-to-end encryption is applied without the compensating detection the operator itself designed and then withdrew. No alternative mitigation has been published. [2]
4.06 Pass
Published child-safety policy with defined enforcement
Policy is published with stated consequences.
Record
Documented failures, enforcement actions, litigation and investigative reporting bearing on the assessment above.
2022-12
Detection programme withdrawn
The operator confirmed it would not proceed with the detection system, citing risks of the mechanism being repurposed for wider surveillance. The communication-safety features for child accounts were retained. [2]
2024-12
Civil action over withdrawal of detection
A civil suit was filed on behalf of survivors alleging that the decision not to deploy the announced system caused continuing harm. [5]
Sources
- [1] Expanded Protections for Children
Apple · 2021-08
- [2] Statement on discontinuation of the CSAM detection programme
Apple, reported by WIRED · 2022-12
- [3] Communication Safety and Screen Time documentation
Apple · 2025
- [4] CyberTipline Data by reporting provider
NCMEC · 2025
- [5] Civil complaint
Illustrative placeholder · 2024-12
Know something we don’t?
If we’ve missed a controversy or there’s newer reporting on Apple, tell us. If you represent Apple, we welcome documentation of safety measures not yet reflected here.
Contact us