Apple is introducing checks for photos and files shared through public iCloud links, raising fresh questions about privacy, encryption and how technology companies should handle potentially harmful content.
The change will begin with iOS 27.3, iPadOS 27.3, macOS 27.3 and visionOS 27.3. Under the updated policy, content shared using the “Anyone with the Link” option will be made accessible to Apple for harmful-content checks.
The policy does not mean Apple will scan every photo or document stored privately in iCloud. It specifically applies to content shared through links that anyone can access, rather than links restricted to people selected by the user.
However, the change matters for users who assume their shared files remain protected by the same privacy safeguards as their private cloud storage.
What will Apple check?
Apple has not clearly defined what it considers “harmful content” in its updated support documentation.
The wording leaves open questions about the categories of material that could be flagged. Reports have suggested the checks could cover malicious files, malware or child sexual abuse material, but Apple has not publicly specified the full scope of the review.
Apple says it reserves the right to move, refuse, modify, remove or delete content it identifies as harmful. It may also restrict or disable the Apple Account associated with the content and, where necessary, involve law enforcement.
The company has not publicly detailed how the checks will be carried out, whether they will be automated, or whether links created before the new updates will also be reviewed.
Public iCloud links will not be end-to-end encrypted
One of the most important details is the effect on encryption.
Apple says content shared using the “Anyone with the Link” option is no longer end-to-end encrypted, even if the owner or recipients have enabled Advanced Data Protection, an optional feature that provides stronger encryption for supported iCloud data.
End-to-end encryption is designed to prevent anyone other than the intended participants from accessing the content. But a public sharing link is accessible to anyone who obtains it, including Apple, meaning it cannot offer the same end-to-end protection.
Users can still choose the “People you choose” option to restrict access to invited recipients or send a copy of a file directly rather than creating a public link.
The distinction is important: the new policy does not remove end-to-end encryption from all iCloud content. It highlights that sharing settings determine who can access a file and what protections apply.
What this means for Apple users
For users who regularly share photographs, videos and documents through public iCloud links, the update introduces an additional consideration: content made available through those links may be reviewed by Apple and could be removed if it violates the company’s rules.
The policy also raises broader questions about transparency. Apple has not yet explained the full criteria for identifying harmful content or provided detailed information about how users can challenge a decision if their files are incorrectly flagged.
For now, users who want tighter control over access to their files can avoid public links for sensitive material and share content only with specific people.
Apple’s update shows the ongoing challenge facing technology companies: preventing the distribution of harmful material while maintaining clear privacy protections and giving users a transparent explanation of how their content is handled.
Read also: Binance calls on AI security experts after $6.3B hack