U.S. Senator Ron Wyden has raised concerns about foreign governments allegedly spying on smartphone users by compelling tech giants Apple and Google to provide access to push notification records. In a letter addressed to Attorney General Merrick Garland, Wyden highlighted the potential privacy risks associated with governments demanding push notification data from these companies.
The investigation, prompted by a tip received last year, suggests that government agencies are seeking access to records related to push notifications, including news alerts, emails, and social media notifications. As these notifications traverse through the servers of Apple and Google, they can offer insights into individual users’ app usage patterns, according to Wyden’s letter.
While governments can legally compel Apple and Google to disclose this information, Wyden emphasized the lack of transparency in such cases. The information about push notification records cannot be publicly disclosed in the U.S. According to Wyden, both Apple and Google should be free to be transparent about legal demands they receive, especially from foreign governments. The senator called the Department of Justice (DOJ) to reconsider any policies hindering this transparency.
Push notification records contain details such as the app receiving the notification, the time of receipt, the corresponding phone and Apple or Google account, and, in some instances, the unencrypted text displayed in the notification. However, the senator did not specify which governments have sought access to this data.
Sources confirmed that foreign and U.S. government agencies have approached Apple and Google for push notification information. The requests include metadata that could link anonymous users on messaging apps to specific Apple and Google accounts.
Both Apple and Google responded to the concerns. An Apple spokesperson mentioned that the federal government prohibited them from sharing information but acknowledged the need for transparency. Google expressed its commitment to informing users about requests for push notification records and highlighted its history of publishing transparency reports.
As the issue gains attention, there are calls for reevaluating policies to balance national security interests and user privacy, emphasizing the importance of transparent communication regarding government data requests.
