{"id":33495,"date":"2021-08-31T16:03:28","date_gmt":"2021-08-31T20:03:28","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=33495"},"modified":"2024-12-02T15:44:44","modified_gmt":"2024-12-02T20:44:44","slug":"privacy-for-apple-employees","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2021\/08\/31\/privacy-for-apple-employees\/","title":{"rendered":"Privacy for Apple Employees"},"content":{"rendered":"<p><a href=\"https:\/\/www.theverge.com\/22648265\/apple-employee-privacy-icloud-id\">Zo&euml; Schiffer<\/a> (<a href=\"https:\/\/twitter.com\/ZoeSchiffer\/status\/1432381686428303360\">tweet<\/a>, <a href=\"https:\/\/news.ycombinator.com\/item?id=28357628\">Hacker News<\/a>):<\/p>\n<blockquote cite=\"https:\/\/www.theverge.com\/22648265\/apple-employee-privacy-icloud-id\">\n<p>Jacob Preston was sitting down with his manager during his first week at Apple when he was told, with little fanfare, that he needed to link his personal Apple ID and work account.<\/p>\n<p>[&#8230;]<\/p>\n<p>Three years later, when Preston handed in his resignation, the choice came back to haunt him. His manager told him to return his work laptop, and &mdash; per Apple protocol &mdash; said he shouldn&rsquo;t wipe the computer&rsquo;s hard drive. His initial worry had come to pass: his personal messages were on this work laptop, as were private documents concerning his taxes and a recent home loan.<\/p>\n<p>[&#8230;]<\/p>\n<p>Employees have been asked to install software builds on their phones to test out new features prior to launch &mdash; only to find the builds expose their personal messages. Others have found that when testing new products like Apple&rsquo;s Face ID, images are recorded every time they open their phones. &ldquo;If they did this to a customer, people would lose their goddamn minds,&rdquo; says Ashley Gj&oslash;vik, a senior engineering program manager.<\/p><\/blockquote>\n\n<p>Dogfooding leads to better products, but Apple&rsquo;s systems aren&rsquo;t designed to do this in a privacy preserving way. Apple work e-mail addresses can&rsquo;t be used to sign up for iCloud or AppleConnect, so employees are required to <a href=\"https:\/\/twitter.com\/oilyraincloud\/status\/1428497203253833731\">use personal<\/a> <a href=\"https:\/\/news.ycombinator.com\/item?id=28241753\">accounts<\/a>. iOS and macOS only let you sign into one Apple ID at a time, so it&rsquo;s not practical to have separate &ldquo;personal&rdquo; accounts for work and personal. Having separate devices for work and personal is also discouraged because it gets in the way of &ldquo;live-on&rdquo; dogfooding.<\/p>\n\n<blockquote cite=\"https:\/\/www.theverge.com\/22648265\/apple-employee-privacy-icloud-id\">\n<p>The blurring of personal and work accounts has resulted in some unusual situations, including Gj&oslash;vik allegedly being forced to hand compromising photos of herself to Apple lawyers when her team became involved in an unrelated legal dispute.<\/p>\n<p>Underpinning all of this is a stringent employment agreement that gives Apple the right to conduct extensive employee surveillance, including &ldquo;physical, video, or electronic surveillance&rdquo; as well as the ability to &ldquo;search your workspace such as file cabinets, desks, and offices (even if locked), review phone records, or search any non-Apple property (such as backpacks, purses) on company premises.&rdquo;<\/p>\n<p>[&#8230;]<\/p>\n<p>It might seem like a company obsessed with secrecy would be sympathetic to its employees&rsquo; wishes to have confidential information of their own. But at Apple, secrecy requires the opposite: extensive knowledge, and control, over its workforce.<\/p>\n<\/blockquote>\n\n<p>It&rsquo;s not clear to what extent the policies are standard corporate ones that elevate the company&rsquo;s interests over the employee&rsquo;s&mdash;because they can&mdash;or whether they date to Tim Cook&rsquo;s 2012 <a href=\"https:\/\/www.theverge.com\/2012\/5\/29\/3051521\/tim-cook-apple-will-double-down-on-secrecy-on-products\">doubling down on secrecy<\/a>, or before. But however much Apple cares about privacy for customers, that doesn&rsquo;t seem to extend to employees. Developers, too, are encouraged to attach privacy invading sysdiagnose logs to each bug report, where they live in Radar &ldquo;forever.&rdquo;<\/p>\n\n<p>The legal dispute that led to turning over Gj&oslash;vik&rsquo;s <a href=\"https:\/\/twitter.com\/ashleygjovik\/status\/1428495420917837826\">private<\/a> <a href=\"https:\/\/twitter.com\/ashleygjovik\/status\/1432416891201490946\">data<\/a> did not even involve her personally, though she is separately fighting the company over <a href=\"https:\/\/www.theverge.com\/2021\/8\/4\/22610112\/apple-female-engineering-manager-leave-sexism-work-environment\">discrimination and harassment<\/a>.<\/p>\n\n<p><a href=\"https:\/\/twitter.com\/CaseyNewton\/status\/1432499208058138626\">Casey Newton<\/a>:<\/p>\n<blockquote cite=\"https:\/\/twitter.com\/CaseyNewton\/status\/1432499208058138626\"><p>Wrote about the twin challenges hitting Apple simultaneously: regulators and lawmakers forcing it to release its grip on the App Store, and employees organizing effectively demanding internal change.<\/p>\n<p>Apple has never seen anything like it.<\/p><\/blockquote>\n\n<p><a href=\"https:\/\/www.theverge.com\/2021\/8\/23\/22638150\/apple-appletoo-employee-harassment-discord\">Zoe Schiffer<\/a> (<a href=\"https:\/\/twitter.com\/ZoeSchiffer\/status\/1429856447983067142\">tweet<\/a>, <a href=\"https:\/\/www.vice.com\/en\/article\/g5gn4b\/apple-workers-collecting-stories-of-abuse-injustice-in-workplace\">Lorenzo Franceschi-Bicchierai<\/a>, <a href=\"https:\/\/news.ycombinator.com\/item?id=28292846\">Hacker<\/a> <a href=\"https:\/\/news.ycombinator.com\/item?id=28279929\">News<\/a>):<\/p>\n<blockquote cite=\"https:\/\/www.theverge.com\/2021\/8\/23\/22638150\/apple-appletoo-employee-harassment-discord\"><p>Apple employee organizing took another step this morning with the launch of a website called <a href=\"https:\/\/appletoo.us\">AppleToo<\/a>. The goal is to collect stories from workers at all levels of the organization who&rsquo;ve experienced harassment or discrimination.<\/p><\/blockquote>\n\n<p>Previously:<\/p>\n<ul>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2021\/08\/05\/scanning-icloud-photos-for-child-sexual-abuse\/\">Scanning iCloud Photos for Child Sexual Abuse<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2021\/06\/11\/settlement-for-applecare-privacy-invasion\/\">Settlement for AppleCare Privacy Invasion<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2020\/10\/09\/remote-work-and-apple-and-microsoft\/\">Remote Work and Apple and Microsoft<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2020\/02\/14\/unpaid-apple-store-bag-checks-ruled-illegal\/\">Unpaid Apple Store Bag Checks Ruled Illegal<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2009\/08\/03\/apples-culture-of-secrecy\/\">Apple&rsquo;s Culture of Secrecy<\/a><\/li>\n<\/ul>\n\n<p id=\"privacy-for-apple-employees-update-2021-09-07\">Update (2021-09-07): <a href=\"https:\/\/twitter.com\/neil_jhaveri\/status\/1433086380041773064\">Neil Jhaveri<\/a>:<\/p>\n<blockquote cite=\"https:\/\/twitter.com\/neil_jhaveri\/status\/1433086380041773064\">\n<p>The article implies coercion that I didn&rsquo;t experience. For a while, I used a separate iCloud.com account for work (I did eventually go personal). The tradeoffs were made clear to me, and many coworkers didn&rsquo;t enable iMessage on their work systems.<\/p>\n<\/blockquote>\n\n<p><a href=\"https:\/\/www.macrumors.com\/2021\/09\/06\/apple-executive-addresses-employee-concerns\/\">Sami Fathi<\/a>:<\/p>\n<blockquote cite=\"https:\/\/www.macrumors.com\/2021\/09\/06\/apple-executive-addresses-employee-concerns\/\"><p>In a video broadcasted to staffers days before Labor Day, Apple&rsquo;s retail and people chief Deirdre O&rsquo;Brien addressed the growing number of Apple employees voicing their opinions about workplace issues like pay inequality.<\/p><p>[&#8230;]<\/p><p>In the video, which was seen by MacRumors, Deirdre O&rsquo;Brien tells staff who are experiencing workplace issues to talk to their managers and &ldquo;business relations partner.&rdquo; She says that Apple has a &ldquo;confidential process to thoroughly investigate, in a way that treats everyone with dignity and respect.&rdquo;<\/p><\/blockquote>\n\n<p>See also: <a href=\"https:\/\/overcast.fm\/+QLdsNYVVA\">Decoder<\/a>.<\/p>\n\n<p id=\"privacy-for-apple-employees-update-2021-09-10\">Update (2021-09-10): <a href=\"https:\/\/www.theverge.com\/2021\/9\/9\/22666049\/apple-fires-senior-engineering-program-manager-ashley-gjovik-for-allegedly-leaking-information\">Zoe Schiffer<\/a> (<a href=\"https:\/\/twitter.com\/ZoeSchiffer\/status\/1436156056619532306\">tweet<\/a>, <a href=\"https:\/\/gizmodo.com\/apple-fires-program-manager-who-accused-bosses-of-haras-1847649269\">Dell Cameron<\/a>, <a href=\"https:\/\/twitter.com\/dellcam\/status\/1436150648614047752\">tweet<\/a>, <a href=\"https:\/\/news.ycombinator.com\/item?id=28477392\">Hacker News<\/a>):<\/p>\n<blockquote cite=\"https:\/\/www.theverge.com\/2021\/9\/9\/22666049\/apple-fires-senior-engineering-program-manager-ashley-gjovik-for-allegedly-leaking-information\">\n<p>Apple has fired senior engineering program manager Ashley Gj&oslash;vik for allegedly violating the company&rsquo;s rules against leaking confidential information.<\/p>\n<\/blockquote>\n\n<p id=\"privacy-for-apple-employees-update-2021-10-15\">Update (2021-10-15): <a href=\"https:\/\/www.theverge.com\/2021\/10\/15\/22727123\/apple-fires-leader-apple-too-movement\">Zoe Schiffer<\/a> (<a href=\"https:\/\/news.ycombinator.com\/item?id=28885093\">Hacker News<\/a>):<\/p>\n<blockquote cite=\"https:\/\/www.theverge.com\/2021\/10\/15\/22727123\/apple-fires-leader-apple-too-movement\">\n<p>Apple has fired Janneke Parrish, a leader of the #AppleToo movement, amid a broad crackdown on leaks and worker organizing. Parrish, a program manager on Apple Maps, was terminated for deleting files off of her work devices during an internal investigation &mdash; an action Apple categorized as &ldquo;non-compliance,&rdquo; according to people familiar with the situation. The files included apps like Robinhood, Pok&eacute;mon GO, and Google Drive.<\/p>\n<\/blockquote>\n\n<p><a href=\"https:\/\/x.com\/ashleygjovik\/status\/1791223006691238345\">Ashley M. Gj&oslash;vik<\/a> (via <a href=\"https:\/\/x.com\/ScooterComputer\/status\/1791561234115878987\">Scott<\/a>):<\/p>\n<blockquote cite=\"https:\/\/x.com\/ashleygjovik\/status\/1791223006691238345\"><p>I think the hearing today went very well. Best case scenario was I keep all my claims; worst case is I only keep the 4 claims Apple&rsquo;s not fighting - but sounds like outcome will be in the middle ground, which is great news. When they&rsquo;re released I&rsquo;ll share transcripts &amp; decision!<\/p><\/blockquote>\n\n<p id=\"privacy-for-apple-employees-update-2024-12-02\">Update (2024-12-02): <a href=\"https:\/\/www.theverge.com\/2024\/12\/2\/24311060\/apple-employee-surveillance-lawsuit\">Emma Roth<\/a> (<a href=\"https:\/\/s3.documentcloud.org\/documents\/25429066\/apple-employee-complaint.pdf\">PDF<\/a>):<\/p>\n<blockquote cite=\"https:\/\/www.theverge.com\/2024\/12\/2\/24311060\/apple-employee-surveillance-lawsuit\">\n<p>An Apple worker is suing the company over claims it requires employees to waive their right to privacy and subjects them to surveillance, <a href=\"https:\/\/www.semafor.com\/article\/12\/02\/2024\/employee-lawsuit-accuses-apple-of-spying-on-its-workers\">as first reported by <em>Semafor<\/em><\/a>. In <a href=\"https:\/\/www.documentcloud.org\/documents\/25429066-apple-employee-complaint?responsive=1&amp;title=1\">a lawsuit filed on Monday<\/a>, Apple employee Amar Bhakta accuses Apple of accessing employee data through company-managed devices &mdash; including personal iPhones it &ldquo;actively encourages&rdquo; workers to use.<\/p>\n<p>[&#8230;]<\/p>\n<p>Additionally, the lawsuit claims that Apple breaks California law by requiring employees to agree to a policy that allows it to &ldquo;engage in physical, video, and electronic surveillance&rdquo; of them, as well as gives it the ability to search Apple and non-Apple devices on &ldquo;company premises,&rdquo; which, in some instances, could allegedly involve a worker&rsquo;s home office.<\/p>\n<\/blockquote>","protected":false},"excerpt":{"rendered":"<p>Zo&euml; Schiffer (tweet, Hacker News): Jacob Preston was sitting down with his manager during his first week at Apple when he was told, with little fanfare, that he needed to link his personal Apple ID and work account. [&#8230;] Three years later, when Preston handed in his resignation, the choice came back to haunt him. [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"apple_news_api_created_at":"2021-08-31T20:03:32Z","apple_news_api_id":"e8054306-bf7e-443d-9f06-c44422ab70aa","apple_news_api_modified_at":"2024-12-02T20:44:47Z","apple_news_api_revision":"AAAAAAAAAAAAAAAAAAAACQ==","apple_news_api_share_url":"https:\/\/apple.news\/A6AVDBr9-RD2fBsREIqtwqg","apple_news_coverimage":0,"apple_news_coverimage_caption":"","apple_news_is_hidden":false,"apple_news_is_paid":false,"apple_news_is_preview":false,"apple_news_is_sponsored":false,"apple_news_maturity_rating":"","apple_news_metadata":"\"\"","apple_news_pullquote":"","apple_news_pullquote_position":"","apple_news_slug":"","apple_news_sections":"\"\"","apple_news_suppress_video_url":false,"apple_news_use_image_component":false,"footnotes":""},"categories":[2],"tags":[38,707,1240,16,31,1837,41,209,30,1891,355,1500,251],"class_list":["post-33495","post","type-post","status-publish","format-standard","hentry","category-technology","tag-apple","tag-apple-id","tag-firing","tag-icloud","tag-ios","tag-ios-14","tag-lawsuit","tag-legal","tag-mac","tag-macos-11-0","tag-privacy","tag-slack","tag-working"],"apple_news_notices":[],"_links":{"self":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/33495","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/comments?post=33495"}],"version-history":[{"count":11,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/33495\/revisions"}],"predecessor-version":[{"id":46001,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/33495\/revisions\/46001"}],"wp:attachment":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/media?parent=33495"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/categories?post=33495"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/tags?post=33495"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}