Re:Sign In with Apple [video]
by olliej on Friday June 07, 2019 @04:33PM
(#20128332)
If you watch the video or read the transcript they explicitly state that they do not record any of the information.
They obviously have a mapping of cloak address -> real address, but there's no requirement for them to have any record of which apps got which addresses.
Re:Sign In with Apple [video]
by megous on Friday June 07, 2019 @08:19PM
(#20129740)
This is not hard to determine. E-mail messages have headers, and the app will send registration e-mail to the cloaked address. So all it takes is scanning the e-mail headers of stored mail.
They obviously have a mapping of cloak address -> real address, but there's no requirement for them to have any record of which apps got which addresses.