How secure is the health data collected by iPhone and Apple Watch? With a white paper published on Wednesday, Apple wants to dispel possible concerns: The document provides an overview of the data protection and security measures used by the Health app and the HealthKit interface.
Central to this is the local processing of health data directly on the device instead of in the cloud: analyzes such as trends, cardio fitness, resting heart rate and also the cycle log are calculated exclusively by the device itself, and only the user gets an insight, as Apple emphasizes. The data is also encrypted locally, and access requires knowledge of the device code or the iPhone PIN – or an unlocked iPhone.
Health data with end-to-end encryption in iCloud
Apple continues to sync health data via iCloud with end-to-end encryption. This full encryption of the data synchronized via the cloud service requires that users have activated two-factor authentication for the Apple ID and are using at least iOS 12. Sharing health data with other apps on the iPhone and the Apple Watch requires the user to give permission first. Apps that read health data via the HealthKit interface are also contractually obliged by Apple not to evaluate this data for advertising purposes.
Parallel to the publication of the white paper, Apple launched an advertising campaign to draw attention to the data protection functions. Since the US Supreme Court overturned the right to abortion last year, there has been a broad discussion about unsafe apps for cycle tracking – and the possible consequences of law enforcement having access to this data. Apple now apparently wants to dispel such concerns as well.
Is Health coming to the iPad?
Apple Health is only available on the iPhone so far, but according to reports, the app could also come to the iPad for the first time with iPadOS 17 in the fall. Observers expect that Apple will soon also better design the health app for the “mental health” area and support tracking of mood swings, for example. The company is said to be working on an AI-based coaching service to motivate users to lead healthier lives, but it’s not expected to launch until 2024.
(lbe)
To home page