Apple implemented privacy safeguards on iOS long ago so that when an app requests access to your contacts, calendars, photos, or location, a dialog box pops up asking for express user permission. On iOS 9 and previous software versions, however, that safeguard did not extend to a device's media library.

iOS_10_privacy_media_library
Apple developer Ben Dodson addressed the privacy concern in a blog post in January:

I discovered that there is no privacy prompt when a developer tries to access your library. In fact, they can access all of your music data […] This process happens completely silently and in my tests I was able to loop through a library of 10,000 songs, put all the metadata in a JSON file, and upload it to a server in under 2 seconds!

Apple acknowledged the issue earlier this year, and it has now introduced a new Cocoa key called NSAppleMusicUsageDescription that developers are required to use in all apps which access the media library on iOS 10 or later. This change ensures that users have to grant express permission for an app to access the music library.

NSAppleMusicUsageDescription (String - iOS). This key lets you describe the reason your app accesses the user’s media library. When the system prompts the user to allow access, the value that you provide for this key is displayed as part of the alert.

To protect user privacy, an iOS app linked on or after iOS 10.0, and which accesses the media library, must statically declare the intent to do so. Include the NSAppleMusicUsageDescription key in your app’s Info.plist file and provide a purpose string for this key. If your app attempts to access the media library without a corresponding purpose string, your app exits.

The new requirement will prevent third-party developers from being able to access a user's media library and send data on what's included back to a server without user-granted permission. This includes changes to the media library, which could have been analyzed for advertising or tracking purposes.

Apps that have requested access to your media library are listed in Settings > Privacy > Media Library.

Apple previewed iOS 10 on Monday during its WWDC 2016 keynote, and it has seeded the first beta to developers. A public beta will launch in July ahead of an official release in the fall. iOS 10 is compatible with most iOS 9 devices, excluding the iPhone 4s, iPad 2 and 3, original iPad mini, and fifth-generation iPod touch.

(Thanks, Steve Moser!)

Related Forum: iOS 10

Top Rated Comments

dvkid Avatar
77 months ago
Not being funny, but what kind of metadata is contained within/linked to a song that would bother me if it was uploaded to somebody elses server?
The most worrisome use for this was the ability to perform a comparison on someones music library and use it as sort of a digital fingerprint to track you across apps in the same way the UDID used to.

For example, if two different apps see the exact same music library on two devices they can reasonably assume that's the same person because of how many points of comparison the music library provides.
Score: 17 Votes (Like | Disagree)
canesalato Avatar
77 months ago

=) good old times
Score: 4 Votes (Like | Disagree)
H2SO4 Avatar
77 months ago
Not being funny, but what kind of metadata is contained within/linked to a song that would bother me if it was uploaded to somebody elses server?
Score: 4 Votes (Like | Disagree)
keysofanxiety Avatar
77 months ago
Not being funny, but what kind of metadata is contained within/linked to a song that would bother me if it was uploaded to somebody elses server?
Good point. However that would also beg the question why they would need to do it in the first place. So whether or not it's malicious, it's good to know that they can't access it without prompting.
Score: 4 Votes (Like | Disagree)
T-Will Avatar
77 months ago
I seriously love Apple's dedication to privacy.
Score: 2 Votes (Like | Disagree)
2457248 Avatar
77 months ago
good, but still, i believe the majority of people just allow everything on each app because they don't care/bother to read the prompts, and they aren't aware of how these privacy breach can possibly do harm.
Score: 2 Votes (Like | Disagree)

Popular Stories

Prosser Series 8 3

Apple Watch Series 8 Rumored to Feature New Design With Flat Display

Wednesday May 18, 2022 6:21 am PDT by
The Apple Watch Series 8 could feature an all-new design with a flat display, according to the leaker known as "ShrimpApplePro." In his latest video on the YouTube channel Front Page Tech, Jon Prosser highlighted information from ShrimpApplePro that suggests the Apple Watch Series 8 could feature a flat display in what seems to be a design originally rumored for the Apple Watch Series 7. ...
anker 563 dock ports

Anker's Latest USB-C Docking Station Brings Triple-Display Support to M1 Macs

Wednesday May 18, 2022 7:06 am PDT by
While Apple's early M1-based Macs can only officially support a single external display, there are ways around the limitation. Anker is launching a new 10-in-1 USB-C docking station today which delivers just that. The Anker 563 USB-C dock includes two HDMI ports and a DisplayPort port, and it leverages DisplayLink to carry multiple video signals over a single connection. Given that this hub...
macOS Monterey 2

Apple Releases macOS Monterey 12.4 With Support for Studio Display Webcam Update

Monday May 16, 2022 10:10 am PDT by
Apple today released macOS Monterey 12.4, the fourth major update to the macOS Monterey operating system that launched in October 2021. macOS Monterey 12.4 comes over two months after the launch of macOS Monterey 12.3, an update that added Universal Control. The ‌‌‌‌‌macOS Monterey‌‌ 12.4 update can be downloaded on all eligible Macs using the Software Update section of System...
Whatsapp Feature

WhatsApp to Let Users Leave Group Chats 'Silently' and View Rich Link Previews in Status Updates

Tuesday May 17, 2022 3:07 am PDT by
WhatsApp is working on a new feature that will allow users to "silently" leave group chats hosted by the messaging platform instead of all members of the group being notified when they do. As it stands, when someone leaves a group chat, WhatsApp announces their exit to the entire group, making the act of leaving very public. It's not possible right now to leave a group quietly, but WhatsApp...
apple data auction iphone privacy ad

Apple Highlights iPhone's Latest Privacy Features in New 'Data Auction' Ad

Wednesday May 18, 2022 9:00 am PDT by
Apple today shared a new ad highlighting iPhone privacy features like App Tracking Transparency and Mail Privacy Protection that are designed to give users more transparency and control when it comes to their personal data being collected. The ad revolves around a young woman named Ellie who discovers that her personal data is being sold at an auction house, with bids being placed on her...
airpodsproinear

Apple Facing Lawsuit After AirPods Allegedly Ruptured Child's Eardrums With Amber Alert

Tuesday May 17, 2022 11:40 am PDT by
Apple's AirPods ruptured the eardrums of a 12-year-old boy in 2020 when a loud Amber Alert was issued, according to a lawsuit filed against Apple in California (via Law360). The child, identified as B.G. in the filing, was watching a movie on Netflix on his iPhone in 2020 while wearing AirPods Pro. The AirPods Pro were allegedly set at a low volume, but an Amber Alert sounded without warning ...
apple store palo alto

Apple Reinstating Employee Mask Mandate at Approximately 100 U.S. Retail Stores

Tuesday May 17, 2022 11:11 am PDT by
Apple retail employees at around 100 stores will need to go back to wearing a mask while working, according to Bloomberg's Mark Gurman. Apple is mandating masks for employees again due to a rising number of COVID cases across the United States. Customers who visit an Apple Store are not required to wear a mask at this time, but Apple is continuing to recommend masks for all Apple Store...