Apple’s AI pitch will live or die by its privacy promise

As expected, yesterday’s WWDC keynote was mostly astir AI. And besides arsenic expected, Apple tried to move its precocious presence into its income pitch: it didn’t unreserved into AI because it was taking its clip to do things right. In this case, “right” intends “with much privateness than anyone else.” It’s a bully transportation — the mobility will beryllium really good it holds up.

The new Apple Intelligence features and the updated Siri AI person been designed to activity crossed iPhone, iPad, Mac, Apple Watch, and Vision Pro. There’s a dedicated Siri AI app, pinch a ChatGPT-esque chatbot experience, caller AI-powered camera and photograph editing features, and the beginnings of an agentic acquisition that will fto Siri AI interact pinch different apps and package connected your iPhone, iPad aliases Mac.

Whatever instrumentality you entree the caller AI from, Apple says the processing will beryllium astir the same: queries will beryllium handled on-device wherever possible, and successful its unafraid Private Cloud Compute strategy erstwhile not. Apple says your information won’t beryllium stored, will only beryllium utilized to execute your request, and won’t beryllium accessible to Apple aliases anyone else. Conversation logs successful the caller Siri AI app will beryllium kept, but only on-device and successful your end-to-end encrypted iCloud account.

This architecture itself isn’t caller — Private Cloud Compute was announced alongside the first Apple Intelligence motorboat successful 2024. But 2 years on, 2 things person changed. First, Apple is undeniably down almost each competitor connected AI, moreover aft yesterday’s announcements. That makes its privateness transportation much important than ever arsenic a measurement to differentiate itself from the competition. It’s the 2nd alteration that makes that trickier: successful portion because it’s truthful behind, Apple is now moving pinch Google and Nvidia to tally its AI operation.

Instead of being designed wholly in-house, Apple’s caller unreality AI models are based connected Google Gemini. Meanwhile Private Cloud Compute has expanded beyond Apple’s ain information centers, moving connected Google Cloud systems utilizing Nvidia GPUs, Intel CPUs, and Google Titan chips.

That’s a marked change. When Private Cloud Compute was first announced, Apple emphasized that it was built specifically to tally connected Apple silicon, pinch a hardened proviso concatenation including extended information scans and validation checks connected each server earlier it joins the rack. Apple can’t power Google, Intel, and Nvidia’s proviso chains though. Instead, Apple now maintains a “cryptographically verifiable, append-only ledger” of each Google Cloud hardware utilized for Private Cloud Compute and “retains complete control” of the software. Apple claims the resulting strategy has the aforesaid “extraordinary information and privateness properties” arsenic before, though skeptics mightiness constituent retired that the longer proviso concatenation introduces vulnerabilities that simply didn’t beryllium before.

Still, Apple tin credibly declare that its attack to AI places a privilege connected privateness lacking from the AI giants. And it wasn’t awkward astir making that point. “Some look to beryllium racing forward, seemingly pursuing AI for the liking of AI, without clear respect for the people, each of us, that it’s yet meant to serve,” SVP of package engineering Craig Federighi said during the keynote. He went connected to explicate that Apple Intelligence has alternatively been designed “with privateness successful mind astatine each step.”

In truth, Apple’s privateness solutions aren’t wholly unique, though they do stay the industry’s astir comprehensive. Last twelvemonth Google announced Private AI Compute, which astatine the clip we called “virtually identical” to Private Cloud Compute (right down to the name), moving connected “one seamless Google stack” powered by its in-house TPUs. The quality is successful application: while Apple uses its backstage unreality computing for each AI query that can’t beryllium tally on-device, Google has been little circumstantial astir erstwhile it uses Private AI Compute — and erstwhile it doesn’t. The institution says it’s utilized for Magic Cue and the AI-powered Recorder app connected Pixel phones, but hasn’t said if it’s utilized for each Gemini query made from 1 of Google’s phones, aliases if location are immoderate balanced protections for Gemini usage connected different platforms.

In fact, Google says that Gemini collects reams of information by default: prompts you submit, files you share, and recordings of spoken conversations. Google besides collects information connected the contented Gemini creates for you, the tasks it carries out, and accusation from and astir the apps, browsers, and devices you usage it with. By default, chat history pinch Gemini is stored for 18 months and past deleted, though you tin trim this to arsenic small arsenic 72 hours.

It’s a akin communicative pinch different awesome AI companies. OpenAI says it collects the prompts and contented that users upload to ChatGPT, on pinch various types of location and instrumentality information. Chats are utilized arsenic training information by default, though you tin disable this. Anthropic collects astir the aforesaid worldly erstwhile you usage Claude, though notes that it deletes audio recordings of spoken prompts, while retaining the transcripts. Claude besides defaults to utilizing your information for exemplary training, and says it’s kept successful a “de-identified” shape for up to 5 years.

By contrast, the Apple Intelligence privateness policy — past updated successful 2025, earlier the astir caller announcements — says that Apple only collects “limited information” connected Private Cloud Compute requests, specified arsenic the size and really agelong it takes to complete, but nary accusation astir the contented of the petition aliases its result. Apple says it doesn’t usage backstage information aliases personification interactions to train its instauration models. Of course, Apple has an advantage here: it doesn’t request to cod your information to train its models, because Google has already handled that utilizing its users’ data. Apple’s business pinch Google whitethorn raise concerns astir really it maintains personification privacy, but it whitethorn besides beryllium precisely really it’s capable to connection functional AI without giving up that privacy.

It’s the much constricted default information postulation that yet makes Apple’s privateness committedness guidelines out. Even if the expanded Private Cloud Compute turns retired not to beryllium arsenic unafraid arsenic it utilized to be, Apple is still claiming to cod a batch little information than immoderate of the AI alternatives. For galore Apple users, that whitethorn beryllium worthy waiting a fewer months — aliases years — for Apple Intelligence to yet arrive.