Every Privacy Guarantee Is One Bug Away From Nothing
For years, Apple’s marketing ran on the premise that choosing their ecosystem was a choice about privacy. The Tim Cook op-eds, the pointed jabs at Google’s data practices, the full-page newspaper ads declaring that what happens on your iPhone stays on your iPhone—all of it built a brand identity around the idea that your device was a closed garden and your information was yours. The Group FaceTime bug that surfaced in January 2019 made that identity look like what it always was: a positioning strategy.
The exploit was almost elegant. You initiated a FaceTime video call with someone, then swiped up to add a third person to the call—except instead of adding someone else, you entered your own number. This created a conference call between you and your target in which their microphone went live before they answered. They couldn’t hear you. They didn’t know you were there. With one additional step—the target pressing the side button to dismiss the incoming call—you could also get their front camera feed. The person declining your call was now showing you their face while you listened to everything in the room.
Apple killed Group FaceTime entirely while they worked on a fix. The feature had existed since iOS 12.1, released in October 2018—meaning the vulnerability had been sitting there for months. The reports that Apple had been notified about it more than a week before they acted aren’t difficult to believe. The incentive structure of large technology companies doesn’t naturally reward urgency on issues that require admitting a failure, especially when the failure directly contradicts your entire brand identity.
What this particular bug clarifies is the structural dishonesty of the privacy argument as marketing. Apple didn’t make the privacy claim because they’d solved the problem of building complex systems at scale while maintaining security. Nobody has solved that problem. They made the claim because it was differentiation—because it moved units and generated loyalty and made Tim Cook look thoughtful in interviews. The gap between the claim and the reality isn’t unique to Apple; it’s the condition of the entire industry. They just happened to be the loudest voice when this one landed.
Every phone you’ve ever owned could probably be turned against you by someone with the right knowledge at the right moment. The garden was never closed. It just looked that way until the next gap in the wall appeared.