| Using only Apple’s official diagnostic tools (Console.app) on a clean, non-jailbroken iPhone 14 Pro Max, the following issues were observed: System daemons silently initiate Bluetooth Low Energy (BLE) scans without app activity or user interaction. GPS location harvesting occurs with no prompts, indicators, or active apps. Internal frameworks bypass Apple’s Transparency, Consent, and Control (TCC) protections using undocumented flags. Bluetooth trust metadata (e.g., IRKs, pairing history) is exposed even when devices are disconnected. Cryptographic failures are silently ignored during trust operations. These behaviors suggest an integrated telemetry pipeline that operates beneath iOS’s user-facing privacy model.
The full report includes logs, technical breakdowns, and reproduction steps. |