“There are things known and there are things unknown and in between are the doors of perception.” — Aldous Huxley

I’m Huxley Westemeier (26’) and welcome to “The Sift,” a weekly opinions column focused on the impacts and implications of new technologies.

______________________________________________________

Encryption. Cryptography protocols. Firewall. Backdoor. For those unfamiliar with cybersecurity, these words might seem directly out of a James Bond film. In reality, they protect our personal and private information every time we search the internet on a laptop or check our smartphones for notifications. Encryption and cryptographic principles are all around us, from financial systems we use to pay for goods, our internet-connected devices, and even the barcodes on products at the grocery store.

I’d like to specifically focus on an unprecedented recent announcement for iPhone and other Apple users connected to Apple’s iCloud network. On February 21st, 2025, Apple announced that iPhone users in the United Kingdom will no longer have access to Apple’s advanced encryption protection features. What does that mean for customers? Allow me to explain.

iCloud is a free service with paid subscriptions that Apple users can purchase to backup their devices. iCloud also allows users to access the new Invites app (think Eventbrite on steroids) and provides features such as Private Relay, which randomizes your phone’s internet connection so companies can’t steal your data or track you across websites. Despite these additional features, encrypted storage is the most likely use case for the service. Let’s say I have a photo of my dog on my computer. If I subscribe to iCloud, it will be encrypted and stored online in complete privacy. Only I have access and even Apple can’t see that it’s a photo of a dog. Once I login on my iPhone with facial recognition, I can download the dog image from iCloud and it decrypts the image since it’s a trusted device. The main point: Apple cannot view the data stored within that image.

Apple has complied with the UK’s guidelines, immediately removing the Advanced Data Protection terminology from iCloud plans in the UK. According to the BBC, the move was partially intended to allow for easier screening of potentially harmful content such as CSAM (child sexual abuse material). It’s important to note that payment credentials, passwords, and health information (heart rate from an Apple Watch, for example) will still remain encrypted. Yet device backups, photos, Apple Notes files, and Voice Memos will become available for the UK and Apple to scan. I view this as a massive security breach, and it warrants a serious discussion of the implications and precedence set by the UK.

The FBI sued Apple over iPhone encryption in 2015. What would happen if a backdoor was opened? I personally use iCloud to store all of my files. If something happens to my MacBook I can rest assured knowing that I haven’t lost any data and that it’s secure. This ruling is a perfect illustration of how our private information is never guaranteed to be secure forever, especially when we entrust it to other companies.

If you’re worried about the future of encryption with iCloud, I recommend acquiring a physical storage drive to back up your files. Remember: the U.S. government hasn’t yet demanded Apple to provide them with a backdoor for American citizens … but nothing is permanent.