Location Services
Privacy Overview
Learn how Location Services protects
your privacy.
November 2019

Contents

Introduction ..............................................................................................3
Privacy by design .................................................................................................3
Control over Location Services ............................................................................3
Location interface features ..................................................................................4
Location Services settings ...................................................................................5
Allowing location access in the background ........................................................5
Background tracking notifications .......................................................................5On-device intelligence with Significant Locations ...............................................6
Bluetooth and Wi-Fi location privacy ................................................................... 6iBeacon privacy ....................................................................................................7
Improving Location Services performance ..........................................................8Conclusion ................................................................................................9Location Services Privacy Overview | November 20192

Introduction
Key Location Privacy Features
Location settings, features,and controls
Location Services acts as agatekeeper between the user andapps that want to use location data.
Location settings, features, andcontrols help keep users in controlof this data.

Significant Locations
The Significant Locations featureallows iPhone, iPad, Apple Watch,and iCloud to learn locations thatare important to users in a way that
can’t be read by Apple.

Your location reveals some of the most sensitive information about you. Where
you live and work, shop and eat, where you travel, and even where you receive
medical care—all can be inferred by tracking your location data. Although it
is sensitive, this data helps developers build relevant, personalized softwareexperiences that help you navigate, facilitate the discovery of nearby people,
businesses, and events, and more through mapping and other applications. To
help protect users from the misuse of their location data, Apple builds softwarethat empowers users to stay in charge of whom they share their location data
with, when they share it, and for how long.

Privacy by design
Location Services in iOS, iPadOS, watchOS, and macOS provides a user’slocation. To determine this location, Apple devices leverage Global Positioning
System (GPS) and Bluetooth beacons (where available) as well as crowdsourced Wi-Fi hotspot and cell tower locations. Location Services has been

Bluetooth and Wi-Fi privacy
iOS 13 and iPadOS include newprotections that help prevent apps
from using Bluetooth and Wi-Fi totrack users without their consent.

designed from the ground up to protect user privacy. Data is processed on theuser’s device where possible, for example, in creating predictive traffic routing
which displays estimated travel time on a device’s lock screen. The architectureof Location Services helps minimize the amount of location data collected byApple. When users choose to share identifiable location data with Apple or thirdiBeacon
Apple’s iBeacon specification
allows apps to provide locationbased experiences while keeping
users in control.

parties, Apple designs features to give users transparency and control over how
their data is being shared. And when non-personally identified location data isshared with Apple, techniques are used to help protect the identity of the user,
such as with data used to improve Routing and Traffic. Finally, security bestpractices are integrated to protect data, for example using end-to-end
encryption so that Apple can’t read Significant Locations.

Control over Location Services
Location Services acts as a gatekeeper between a user’s location data andthe apps seeking to leverage this data. Location data enables a variety of
personalized experiences. For example, an app might use a user’s location
along with the user’s search query to help the user find nearby coffee shops
or music venues. And the device can automatically set its time zone basedon the current location so that alarms, appointments, and reminders remain
accurate during international travel.
Users have the option of turning Location Services on during the Setup
Assistant process when they’re setting up a new device. After the Setup
Assistant process, users can turn Location Services on or off in Settings.
When Location Services is turned off, apps can’t access the user’s Location
Services data at any time—this remains true whether an app is in use or notin use. Turning off Location Services will limit the ability of apps to provide
relevant, location-based experiences. For example, if a mapping app doesn’t
have your location, it won’t be able to give you turn-by-turn directions. For

Location Services Privacy Overview | November 20193safety purposes, location information for an iPhone, iPad, or Apple Watch may
be accessed to aid response efforts if the user places an emergency call,regardless of whether Location Services is enabled.

Location in the Photos app
When the user gives permission, theCamera app is granted permission touse location to geo-tag photos forsuggesting Memories that intelligently
complement where the user waswhen the photo was taken.

Location Services lists the apps thathave asked for permission to use location
data, and users can control and edit
these permissions. A hollow arrow next
to the app indicates that location data
may be used under certain conditions(users can tap on the app to learn more).
A purple arrow indicates that location
data has been used recently. A grayarrow indicates that location data has
been used in the last 24 hours.

Location interface features
In addition to Location Services, there are other features that help users
understand how their locations are being tracked. For example, the arrow inthe status bar in iOS and iPadOS shows when Location Services is receiving
location requests from apps asking for location data. If an app is actively
locating the user, a black arrow appears in the status bar. In addition, users may
be able to see at a glance how precisely their location is being measured bylooking at an app interface that displays their location on a map. For example,
Apple Maps shows your current location using a blue marker. Because theprecision with which your location can be determined is limited, a blue halo
will appear around this marker. The size of the halo shows approximately how
precisely your location can be determined: the smaller the halo, the greater
the precision. Third-party apps may adopt these design conventions in theirapps as well.

In the Maps interface, the blue dot marks
your approximate location, while the blue
halo is an indicator of precision.
Location Services Privacy Overview | November 20194

Location Services settings
In Location Services settings, users can see and control which Apple andthird-party apps have permission to use data on the location of their iPhone,iPad, Apple Watch, or Mac. In iOS 13 and iPadOS, when an app makes its firstlocation request, users are shown a prompt that informs them which app ismaking the request along with the developer’s explanation of how the app uses
location data. Choosing Allow Once enables the app to access location data
during that first session so a user can temporarily sample the app’s locationbased services. Choosing Allow While Using App gives the app permission toaccess a user’s location data whenever the app is in use. Choosing Don't Allow
prevents the app from accessing location data.
The Location Services settings are built for user transparency and control.
Their primary purpose is to inform users about when and how their location
data is being used and to enable them to control access for each app. All appsthat have made location requests appear on a list within the Location Services
settings. To make a change to an app’s access to location data, users cansimply find the app on this list, tap the app, and then select their preferred level
The location permission prompt in iOS 13and iPadOS.

of access to location data. The choices include the following: no access(choose Never), access while using the app (choose Allow While Using App),or decide later (choose Ask Next Time).

Allowing location access in the backgroundSome apps use location data even while they are in the background. Uponan app’s first location request while it is in the background, the user will be
notified that the app is requesting to use their location data and the app’s
stated purpose for the request. Users have the option to Always Allow, enabling
the app to access their location while in the background, or to Keep Only
While Using, which would continue to prevent the app’s access while in thebackground and allow access only while the app is in use.

Background tracking notifications
When a user allows an app to always use their location and the app accesses
their location in the background, the device will periodically show the user a
notification prompt. This prompt reminds the user that their location is being
shared in the background, displaying where their location was accessed while inthe background, and giving them the ability to adjust their settings. Apps mustcomply with our App Store Guidelines for any such data use. To learn more,users can review the requesting app’s privacy policy to understand how theirlocation data will be used, managed, and possibly shared with other entities.
The background location prompt in iOS 13and iPadOS.

Location Services Privacy Overview | November 20195

On-device intelligence with Significant Locations
Significant Locations allows iPhone, iPad, Apple Watch, and iCloud to learn theplaces that are significant to a user in order to provide useful location-related
features and information in a way that Apple can’t read. Data collected abouta significant location includes the address the user traveled to, when they
traveled there, how long they stayed, the amount of time spent commuting tothe location, the method used to reach the location (e.g., by car, by walking,etc.), and the total number of times the user has visited that place. This data
is not shared with third parties, is fully encrypted, and can’t be read by Apple.
Features that leverage Significant Locations involve intelligent assistance andprediction, such as Memories in Photos and predictive traffic routing on theLock screen. By processing Significant Locations on device, a device canprovide personalized experiences without Apple or third parties learningsensitive details about your pattern of life.
In Settings > Privacy > Location Services > System Services > Significant
Locations, users can turn Significant Locations off or on by tapping the toggle
at the top of the page. They can scroll through their history of Significant
Locations as well as clear this history by choosing Clear History at the bottom
Background tracking notifications in
iOS 13 and iPadOS.

of the page. Users can also delete a specific location by tapping on thatlocation and then choosing Edit and Delete.

Bluetooth and Wi-Fi location privacy
Bluetooth and Wi-Fi enable helpful functionality by letting users connect toother devices and to the internet in the case of Wi-Fi. The locations of Wi-Fi
networks and Bluetooth beacons are sometimes mapped and made publicly
available, which means that the networks users connect to and beacons theirdevices discover might be used to track location. Some apps may have tried tocircumvent the controls on location access that users have set up in Location
Services by scanning for Bluetooth or Wi-Fi signals to infer the user’s location.
In iOS 13 and iPadOS, Apple is shutting such potential behavior down by
introducing new controls for Bluetooth and limiting access to Wi-Fi networks
by apps.
To protect users from Bluetooth location scanning, when an app requests
Bluetooth access to a user’s device with iOS or iPadOS, the user will be alerted
about the request and how the app will use their Bluetooth data. Users canchoose to allow or withhold access. Users can also visit the updated Bluetooth
tab in Settings > Privacy to make a change to the access for each app that hasrequested it. Similar to Location Services, the Bluetooth tab enables users tosee a comprehensive list of apps that have requested Bluetooth access and toindividually turn each app’s access on or off. Access to Bluetooth audio devices
Significant Locations settings in iOS 13and iPadOS. Significant Locations
allows iPhone, iPad, Apple Watch,and iCloud to learn locations that areimportant to users in a way thatcannot be read by Apple.

isn’t impacted by these new controls and settings, so disallowing or disabling
Bluetooth access will not prevent an app from playing audio to Bluetooth audio
devices.

Location Services Privacy Overview | November 20196

To protect against Wi-Fi location scanning, iOS 13 and iPadOS limit the typeof apps that can see the names of Wi-Fi networks the user connects to. Only
apps that have already been granted user permission to access precise location
data, that have been given permission to set up a virtual private network profile,or that have been given permission to configure a network on the system on
the user’s behalf will be able to see the names of Wi-Fi networks the user isconnected to. In the case of apps that have permission to configure a networkon the system on the user’s behalf, the app will only be able to see the names
and MAC addresses of Wi-Fi networks configured by the app itself.

iBeacon privacy
Beacons are devices that emit a Bluetooth Low Energy signal and are installed
in a physical location. Once a beacon is set up, an app that has integrated abeacon protocol can push notifications to users who have downloaded the appand approach the beacon. Beacons are a small subset of Bluetooth technology
applications, primarily used in online/offline retail and tourism experiences. For
example, after beacons are set up in a store, an app could notify the user aboutBluetooth access prompt in iOS 13and iPadOS.

a promotion related to the product that the user is walking by. Likewise, a sports
league’s app could surface seat information as the user moves through thestands, and a museum’s app could offer information about each artwork as
the user walks through the gallery.
In 2013, Apple created iBeacon, a protocol that has been adopted by beacon
manufacturers and app developers to create personalized, relevant, locationbased software experiences while respecting user privacy. Since apps thatintegrate iBeacon enable developers to know when an iPhone user is in close
proximity to a beacon, iBeacon usage is considered location data and integrated
with Location Services. This means that if a user installs an app that leverages
iBeacon and goes to Location Services to give this app permission to use theirlocation data While in Use, the app will also be able to access their location
via iBeacon while the app is in use, but not when the app is in the background.
If a user wants to turn off beacon access for a particular app, they can go tothe Location Services tab within Privacy Settings and turn that app’s location
access to Never. Tying iBeacon to Location Services helps ensure that users
have transparency and control over how their location data is used by beaconsthat implement iBeacon. And with Bluetooth controls starting in iOS 13 andiPadOS, apps are no longer able to use Bluetooth beacons that use other, lessprivacy-friendly protocols unless the user explicitly consents to Bluetoothaccess for the app.

Location Services Privacy Overview | November 20197

Improving Location Services performance
Apple continuously improves the precision of inferences about device location
through the crowdsourcing of non-personally identifying data from Appledevices. This data is transmitted from the device to Apple using encryption.
If a user has turned on Location Services, their device will periodically send
the geo-tagged locations of nearby Wi-Fi hotspots and cell towers to Appleto further improve Apple’s database of Wi-Fi hotspot and cell tower locations.
This helps Apple to provide real-time, localized services in more places aroundthe world. To protect user privacy, the submission uses a random, rotating
identifier so that Apple can’t tie multiple submissions together or tie
submissions to a user’s identity.
In addition, when a device is physically moving (for example, when the user iswalking or in a car), iOS periodically sends location and speed data to Apple,
to help improve our location services for Routing and Traffic, including Siri andMaps. For example, if you’re on a road trip and Location Services is turned on,
your GPS-enabled iOS device will periodically send GPS locations and travel
speed information to Apple to strengthen Apple’s crowdsourced road traffic
database—Siri and Maps will use this data to dynamically optimize your route.
Users can reset a device’s location
settings to the factory default by goingto Settings > General > Reset andtapping Reset Location & Privacy.
When location and privacy settings
are reset, apps will stop using location
data until a user grants thempermission again.

To protect user privacy, this data is associated with an identifier that rotatesat the conclusion of a trip, not with the user’s Apple ID or any other accountinformation. Rotating the ID at the conclusion of the trip makes it harder forApple to piece together a history of any user’s activity over time. On busy roads,
data is also sent to Apple and partners as part of providing real-time traffic
information. By analyzing historical traffic patterns, Apple developed a custom
filter to protect user privacy that only shares data from small roads if thoseroads have more than a certain level of activity. Users can turn off Routing andTraffic collection in Settings.

Location Services Privacy Overview | November 20198Conclusion
Apple is committed to helping protect customers with leading privacy andsecurity technologies that are designed to safeguard personal information.
Location Services is built with that commitment in mind. The following Apple
privacy principles are deeply integrated into Location Services:• Process data on device where possible.
• Minimize the amount of data collected by Apple and shared with third parties.
• Provide transparency and control around data that is shared.
• Protect the user’s identity when sharing sensitive information with Apple.
• Implement security best practices to protect user data.
To learn more about Apple’s commitment to privacy, go to apple.com/privacy.

© 2019 Apple Inc. All rights reserved. Apple, the Apple logo, Apple Watch, iPad, iPhone, Mac, macOS, Siri, and watchOS
are trademarks of Apple Inc., registered in the U.S. and other countries. iBeacon and macOS are trademarks of Apple
Inc. iCloud is a service mark of Apple Inc., registered in the U.S. and other countries. The Bluetooth® word mark andlogos are registered trademarks owned by Bluetooth SIG, Inc. and any use of such marks by Apple is under license. IOS
is a trademark or registered trademark of Cisco in the U.S. and other countries and is used under license. Other productand company names mentioned herein may be trademarks of their respective companies. Product specifications aresubject to change without notice. This material is provided for information purposes only; Apple assumes no liability
related to its use. November 2019
Location Services Privacy Overview | November 20199