iCloud Was Storing Deleted Safari Browser History for Months, but Apple Fixed the Issue

When clearing Safari browser history, iPhone and iPad users expect all records to be permanently deleted from their devices, but it appears Apple's cross-device browser syncing feature caused iCloud to secretly store browsing history for a much longer period of time ranging from several months to over a year.

iCloud was caught storing deleted browser history by software company Elcomsoft, which develops cracking tools for extracting protected data from iOS devices. Speaking to Forbes, Elcomsoft CEO Vladimir Katalov explained that the company had been able to retrieve "deleted" browser history dating back more than a year.

elcomsoftdeletedbrowserhistory

Deleted browser history pulled from iCloud by Elcomsoft

Apple was keeping deleted browser information in a separate iCloud record called "tombstone," and in a press release announcing updated Phone Breaker software for extracting the stored browsing info, Elcomsoft explains that the data was likely kept as part of an iCloud feature that syncs browsing history across multiple devices and ensures it's deleted from all devices when history is cleared.

The point is that Apple keeps synced Safari browsing history in the cloud for much longer than one, three or four months - even for deleted entries. ElcomSoft researchers were able to access records that've been deleted more than a year ago, which means that deleted records are not actually cleaned up from iCloud.

Forbes tried using the Phone Breaker software created by Elcomsoft and was able to retrieve nearly 7,000 records dating back to November of 2015. Site names, URLs, Google searches, visit counts, and the date and time items were deleted were included. It's not clear why Apple was storing the information for so long, but it appears to have been an oversight related to ensuring information is deleted on all devices once cleared rather than intentional.

Shortly after Forbes and Elcomsoft published their iCloud findings, Elcomsoft noticed previously available records being deleted as part of a server-side fix quietly implemented by Apple. All deleted browser records older than two weeks have been eliminated. From Elcomsoft's blog:

Update: we have informed media about this issue in advance, and they reached Apple for comments. As far as we know, Apple has not responded, but started purging older history records. For what we know, they could be just moving them to other servers, making deleted records inaccessible from the outside; but we never know for sure. Either way, as of right now, for most iCloud accounts we can see history records for the last two weeks only (deleted records for those two weeks are still there though).

Good move, Apple. Still, we would like to get an explanation.

Even before Apple made the server-side fix to make sure deleted browsing history is permanently removed in a timely manner, it was difficult to get ahold of the information. Forensic software like Phone Breaker was required, which doesn't come cheap, and Phone Breaker only works with a user's Apple ID and password, or an authentication token pulled from a user's computer.

In iOS 9.3 and later (and Safari 9.1 and later), Apple also began turning URLs into unreadable hashes instead of plaintext when browser history is deleted, an additional security measure, but Forbes says that didn't stop Elcomsoft's tool from working with the newest versions of Safari.

While Apple now appears to be deleting browsing data at the two week mark (or has made it invisible to tools like Phone Breaker), iCloud users should be aware that their browsing history, including cleared browser history, is stored in iCloud for at least that two week period. Users who are not comfortable with that can easily disable syncing features through the iCloud section of the Settings app. Apple has not commented on Elcomsoft's finding or the apparent server-side fix.

Tag: iCloud

Top Rated Comments

AngerDanger Avatar
61 months ago
Apple was keeping deleted browser information in a separate iCloud recored called "tombstone,"
It's a shame they didn't give it some terribly creepy name… wait.

What's written on your tombstone tends to be whatever is most memorable about you, so the fact that Apple considers your internet history worthy of an epitaph is worrisome.



Attachment Image
Score: 27 Votes (Like | Disagree)
yaxomoxay Avatar
61 months ago
Glad they didn't tell my wife......
Score: 17 Votes (Like | Disagree)
Naraxus Avatar
61 months ago
So the line that Cook would always espouse about Apple caring about user privacy is exposed for bull that it always was.
Score: 12 Votes (Like | Disagree)
maflynn Avatar
61 months ago
What else are you looking for from them, though?
Too many companies seem to hide behind it was a bug excuse when they're caught hanging on to data they probably shouldn't have. For a company that seems to pride itself on privacy, this is rather disappointing.
Score: 11 Votes (Like | Disagree)
iShatMyself Avatar
61 months ago
Glad I never used iCloud.
Score: 8 Votes (Like | Disagree)
slimothy Avatar
61 months ago
This is not good.
Score: 8 Votes (Like | Disagree)

Top Stories

studio buds family

Beats Studio Buds Debuting Today With Active Noise Cancellation, Stemless Design, and More for $150

Monday June 14, 2021 8:00 am PDT by
We've seen a lot of teasers about the Beats Studio Buds over the past month since they first showed up in Apple's beta software updates, and today they're finally official. The Beats Studio Buds are available to order today in red, white, and black ahead of a June 24 ship date, and they're priced at $149.99. The Studio Buds are the first Beats-branded earbuds to truly compete with AirPods...
affinity designer contour tool

Serif Updates Affinity Photo, Designer, and Publisher With New Tools and Functions

Thursday February 4, 2021 1:58 am PST by
Serif today announced across-the-board updates for its popular suite of Affinity creative apps, including Affinity Photo, Affinity Designer, and the Apple award-winning Affinity Publisher for Mac, all of which were among the first professional creative suites to be optimized for Apple's new M1 chip. "After another year which saw record numbers of people switching to Affinity, it's exciting to...
maxresdefault

Craig Federighi and Greg Joswiak Discuss iPadOS 15, macOS Monterey, Privacy, Shortcuts on Mac, and More

Saturday June 12, 2021 6:12 am PDT by
As is tradition, Apple executives Craig Federighi and Greg Joswiak joined Daring Fireball's John Gruber in an episode of The Talk Show to discuss several announcements that Apple made over this weeks WWDC, including iPadOS 15, macOS Monterey, and a large focus around privacy. Federighi kicks off the conversation discussing the common architecture, now thanks to Apple silicon, across all of...
M1X MBP Feature

Leaker: Upcoming MacBook Pro to See Price Hike Over Current Model, Equal Performance Across 14 and 16-Inch Sizes

Tuesday August 24, 2021 5:28 am PDT by
The upcoming 14-inch MacBook Pro is set to be more expensive than the current 13-inch MacBook Pro and both the 14 and 16-inch models will offer the same performance, according to the leaker known as "Dylandkt." The leaker shared the information on Twitter, explaining that both of the upcoming MacBook Pro models, expected to come in 14 and 16-inch sizes, will feature the same performance due...
youtube apple tv

YouTube Discontinuing 3rd-Generation Apple TV App, AirPlay Still Available

Wednesday February 3, 2021 3:09 pm PST by
YouTube is planning to stop supporting its YouTube app on the third-generation Apple TV models, where YouTube has long been available as a channel option. A 9to5Mac reader received a message about the upcoming app discontinuation, which is set to take place in March.Starting early March, the YouTube app will no longer be available on Apple TV (3rd generation). You can still watch YouTube on...
General Apps Messages

Android iMessage Competitor Puts Pressure on Apple

Friday July 30, 2021 3:15 am PDT by
Google and the three major U.S. carriers, including Verizon, AT&T, and T-Mobile, will all support a new communications protocol on Android smartphones starting in 2022, a move that puts pressure on Apple to adopt a new cross-platform messaging standard and may present a challenge to iMessage. Verizon recently announced that it is planning to adopt Messages by Google as its default messaging...
YouTube Picture in Picture Feature

YouTube Premium Subscribers Can Now Use iOS Picture-in-Picture: Here's How

Wednesday August 25, 2021 3:55 am PDT by
Google has rolled out picture-in-picture support as an "experimental" feature for YouTube premium subscribers, allowing them to watch video in a small window when the app is closed. If you're a premium YouTube subscriber looking to try out picture-in-picture, follow these steps: Launch a web browser and sign into your YouTube account at YouTube.com. Navigate to www.youtube.com/new. Scroll...
iPhone 13 Dummy Thumbnail 2

Kuo: iPhone 13 to Feature LEO Satellite Communications to Make Calls and Texts Without Cellular Coverage

Sunday August 29, 2021 7:39 am PDT by
The iPhone 13 will feature low earth orbit (LEO) satellite communication connectivity to allow users to make calls and send messages in areas without 4G or 5G coverage, according to the reliable analyst Ming-Chi Kuo. In a note to investors, seen by MacRumors, Kuo explained that the iPhone 13 lineup will feature hardware that is able to connect to LEO satellites. If enabled with the relevant...
twitterqrcode

Twitter Introduces QR Codes for Sharing and Following Accounts

Wednesday November 16, 2016 4:13 pm PST by
Twitter today introduced Snapchat-style QR codes, which are designed to make it easier to find and follow friends on the social network. Each Twitter QR code is unique to an individual Twitter user, so when scanned, it'll bring up the person's account. To access your Twitter QR code, you'll need the official Twitter app for iOS. In the app, go to your profile, tap on the gear icon, and select...
macOS Monterey on MBP Feature

Apple Seeds Sixth Beta of macOS Monterey to Developers

Monday August 30, 2021 1:11 pm PDT by
Apple today seeded the sixth developer beta of macOS Monterey, the newest version of the macOS operating system. The sixth beta comes three weeks after Apple released the fifth macOS Monterey beta. Registered developers can download the beta through the Apple Developer Center and once the appropriate profile is installed, betas will be available through the Software Update mechanism in...