Leigh Wheaton, Jill Paul, and Trevor Paul — three iTunes users from Rhode Island and Michigan — have filed a federal lawsuit against the Cupertino-based tech giant alleging that the company unlawfully collects and sells their iTunes listening information to third parties without informed consent. Apple even took to the Consumer Electronics Show (CES) earlier this year to tout its privacy advantage with the ad slogan: “What happens on your iPhone stays on your iPhone.”
— Chris Velazco (@chrisvelazco) January 4, 2019 But according to the 51-page lawsuit that was filed on May 24 in California’s Northern Federal District, “None of the information pertaining to the music you purchase on your iPhone stays on your iPhone.” The lawsuit also comes days after Apple outlined a new method for tracking online ads without invading users’ privacy.
Tracking iTunes customers
The plaintiffs allege that a third party can purchase a list of iTunes customers based on different demographic requirements, like a list of unmarried people who have a taste for a particular genre of music: The data Apple discloses supposedly includes the full names and home addresses of its customers, together with the genres and, in some cases, song titles customers have purchased via the iTunes Store and then stored in their devices. The lawsuit further alleges that the third-party beneficiaries of this listening data match it to other sensitive personal information gathered about iTunes users from various sources, and then resell that information on the open market. In addition, it says Apple provided listening data access via its MediaPlayer Framework APIs without receiving any permission from the users. It pointed to an issue raised by iOS developer David Benson in 2016 which allowed third-party app developers to access titles of all songs purchased by a user on iTunes. Apple took more than six months to fix the problem. Collectively, over 100 plaintiffs are seeking an excess of $5 million in total damages. They are demanding a compensation of $250 for each Rhode Island iTunes customer whose information was disclosed, and $5,000 per user in Michigan, under the states’ respective privacy laws.
What the legalese says?
Apple’s privacy policy does state that it uses your iTunes listening information, downloads, and purchases to personalize the experience and deliver targeted ads on the App Store. It nowhere mentions disclosing your listening habits to third-parties. From the iTunes Store & Privacy page: And, from its privacy policy page: With trust in Silicon Valley tech companies hitting an all-time low over the last few years, it’ll be interesting to see how this lawsuit plays out. Apple is yet to comment on the latest development.
