Teardowns that cover the iOS build of an app.
Apple's Declared Age Range API returns an age range, a declaration type and parental-control flags to an iPhone app, inside the app process. Apple keeps the birthday. Apple has applied it to new Texas accounts since June 4, 2026; California deems a developer to know the range from January 1, 2027.
On September 16, 2026 Apple announced an alternative App Tracking Transparency prompt for the EU from iOS 27.2: a full-page sheet, Markdown text, an Additional Information button and a re-prompt after one year. It is the only prompt for apps in Germany, France, Italy, Poland and Romania.
Apple's iOS 27 security notes, released September 14, 2026, list 126 CVE IDs. Fourteen entries describe an app obtaining persistent identifiers, fingerprinting signals, the list of installed apps, location from system logs, cross-app tracking or Privacy preferences. iOS 26.7 fixes seven of them.
I monitored device setup flow, scanning the room, the map, AI features, voice commands on both the vacuum cleaner and on the iOS app. The product respects user privacy better than most but it could have been better. Default dangerous features are off with a consent screen for each.
I decompiled the Temu app on both platforms. On Android it erases all ten of its own native libraries from the file security scanners read, rewrites its own Java methods under a server flag, and seals its telemetry with a home-grown cipher that has no extractable key.