In 2016, a woman took iPhone to an Apple Authorized Service Center for repair. However, the service center technicians gained access to the woman's personal data and revealing photos and leaked them online. This incident occurred at a Pegatron (Apple supplier and partner) facility in California.
This story is shocking.
Our devices usually contain a lot of personal data: health data, financial information, communications with other people, personal photos and videos.
See also: 26 million logins stolen from Amazon, Facebook, Apple and other tech giants
The idea that someone could gain access to this data when the iPhone or any device is in for repair, or even worse, the idea that someone could leak this data, is scary.
Apple is a company that claims that privacy is extremely important. And yet, the way it handled the situation suggests that the company is perhaps more concerned with its image than its users' privacy.
The incident had remained secret and became known due to the legal dispute between Pegatron and its insurer regarding the cost.
Apple should care about user privacy in all areas, even when someone requests their iPhone to be repaired.
It's unclear whether the repair center requested access to the iPhone in question or if the device was unprotected, but either way, Apple needs to make sure it protects its users.
See also: iPhone battery problems after iOS 14.6 update
For example, some cars (e.g. Tesla) have a valet mode that protects certain features of the vehicle from being accessed by third parties. Apple should implement a similar function for its devices. This “repair mode” feature would allow technicians involved in repairing the devices to have access to the devices, but not to their data.
This would be a great addition to newer devices and would fix this security hole.
In addition, authorized repair centers should offer an environment where spying and the ability to copy or share user data would be impossible.
For their part, users, to be more certain that they will not face such a situation, it is a good idea to back up their data and delete it from their iPhone before giving it to a technician. After the repair, they will be able to regain their data.
While controlling privacy and user data security during repair sounds difficult, the problems for the company will be greater (damages and bad reputation) if a breach and data leak occurs.
See also: Apple AirDrop: Bug could lead to user data leak!
The fact that Apple kept the incident secret for quite some time is not good and indicates that other such incidents may have occurred (at Apple and elsewhere) that were never made public.
Source: ZDNet
