Sure; all sorts of data leaves your iPhone in the form of encrypted channels to Apple servers, whether you have telemetry/analytics enabled or not. When you fully power-down your iPhone with Find My disabled, your Baseband modem is still sending and receiving information from nearby cell towers. Apple has created conduits specifically for harvesting and retaining this data, they wouldn't collect it all if this wasn't the case.
Oh, and if you still don't believe me, you should look into some of the more recent PRISM revelations (eg. how iMessage and Find My can be used by law enforcement), or the ways that the CCP uses the data Apple collects for them. There is nothing besides marketing that suggests Apple has a commitment to privacy or security.
That is not what I hear from people who work there.
> you should look into some of the more recent PRISM revelations (eg. how iMessage and Find My can be used by law enforcement), or the ways that the CCP uses the data Apple collects for them
I'd be interested in references/citations if you have them.
Hmm, as I understand it:
"Timestamps for app usage": notarization checks happen the first time you start a new app, basically like OCSP to enable certificate revocation: https://support.apple.com/guide/security/gatekeeper-and-runt... I dislike online validation and would prefer a revocation list. I also dislike syspolicyd's perpetual, repeated, and CPU-hungry anti-malware scanning. Installing Xcode or enabling developer mode allows pointless online checks to be turned off for scripts in Terminal at least.
"tracks spotlight usage": Siri suggestions https://www.apple.com/legal/privacy/data/en/siri-suggestions... I usually turn this off.
"Find My": a feature that allows you to go to icloud.com and locate your iPhone if it is lost, and also creates its own ad hoc network for finding iPhones. Probably that involves location information. I usually turn this off.
What I'd like to know is: Is there any evidence that Apple is retaining this information and using it for other purposes, for example to build user-specific profiles for advertising the way Google or Facebook might?