Since we're often that "tech friend", we should know what we're talking about:
iOS Security white paper: https://www.apple.com/business/docs/iOS_Security_Guide.pdf
Apple's privacy pages: http://www.apple.com/privacy/
How iOS Security Really Works: video of a session from WWDC 2016 — https://developer.apple.com/videos/play/wwdc2016/705/