[Razengan]

Apple has allowed Facebook, TikTok etc. to track users across devices AND device resets via the iCloud Keychain API.

When you log into FB on any account on any device, then install FB on a new device, or even after you erase the device, they know it's you even before you log in. Because the info is tied to your Apple iCloud account.

And there's no way for users to see or delete what data other companies have stored and linked to your Apple ID via that API.

It's been like this for at least 5 years and nobody seems to care.

[twoWhlsGud]

Is there a write up of this somewhere? Curious to read more...

[Razengan]

None that I found. You can test it right now yourself. Install FB, log in, delete FB, reinstall FB. Your previous login info will be there.

That would be fine if users could SEE what has been stored and DELETE it WITHOUT going through the app and trusting it to show you everything honestly.

What's even worse is that it silently persists across DEVICE reinstalls.

Erase and reset your iPhone/iPad. Sign into the same iCloud account. Reinstall FB. Your login info will still be there.

Buy a new iPhone/iPad. Sign into the same iCloud account. Reinstall FB. Your login info will still be there.

And nope, no one seems to care.