Is Apple Intelligence actually private?

Apple Intelligence is Apple's AI system, introduced in iOS 18 and significantly expanded in iOS 26. Its privacy model is the most aggressive of any major AI platform, but it has nuances.

The three tiers of Apple Intelligence:

• On-device processing (~70% of requests):

- Runs entirely on your iPhone, iPad, or Mac.

- Uses Apple's Foundation Models (3B parameter on-device LLM in iOS 26).

- No data leaves the device.

- Examples: writing tools, summarization of short content, Siri suggestions, Genmoji.

• Private Cloud Compute (PCC, ~25% of requests):

- For requests too complex for on-device processing.

- Runs on Apple Silicon servers Apple custom-designed for AI privacy.

- Apple says: no persistent storage, no admin access, verifiable through public code attestation.

- Each request encrypted with a one-time key tied to that PCC node.

- Apple cannot decrypt requests after they're processed.

• Third-party AI (~5% of requests, opt-in):

- For requests Siri can't handle, you can opt in to ChatGPT.

- When ChatGPT is invoked, your request leaves Apple's ecosystem.

- OpenAI's policy applies (API-grade, 30-day retention, no training).

- Apple shows a clear prompt every time it sends data to ChatGPT.

What Apple says PCC does:

• Servers run only verified code published by Apple.
• Researchers can inspect the code.
• Servers have no persistent disk storage.
• Each request is encrypted end-to-end.
• Apple themselves cannot decrypt PCC requests.

The trust questions critics raise:

• Can Apple be compelled by law to add a backdoor? Apple says PCC's architecture makes secret modifications impossible (verifiable code), but this hasn't been tested in court.
• What if Apple's verifiable-code promise is incomplete? Researchers have flagged that not all server-side code is verifiable — only the AI processing layer.
• Does Apple log metadata? Apple says no, but trust required.

Compared to competitors:

• Google Gemini on Pixel: similar on-device tier, but cloud requests go to Google servers without Apple's PCC-style architecture.
• Microsoft Copilot: cloud-only on most devices; uses Azure infrastructure.
• OpenAI ChatGPT: cloud-only; no on-device option.
• Anthropic Claude: cloud-only; no on-device option for consumers.

Apple Intelligence is the only major AI platform with a credible on-device + verifiable-cloud architecture as of 2026.

Practical tips:

• Check the indicator. When PCC is invoked, Apple shows a small icon in the writing tools UI.
• ChatGPT is opt-in. You can disable it entirely: Settings → Apple Intelligence & Siri → ChatGPT → off.
• On-device-only mode. iOS 26 has a setting (Settings → Apple Intelligence → Use On-Device Models Only) that disables PCC entirely. AI features become more limited but nothing leaves your device.
• Némos: uses *only* on-device Foundation Models. No PCC, no cloud fallback. The fastest way to use Apple Intelligence with zero cloud surface.

Bottom line: Apple Intelligence is the most private mainstream AI platform in 2026. It's not zero-trust (you still trust Apple), but it's the closest mainstream option.