Report: Apple’s secrecy efforts partly undermined by lax work iCloud policy

A new report from The Information reveals how Apple's policy of allowing employees to mix personal and work iCloud accounts has inadvertently exposed confidential company files to former staff members. Apple, in a recent trade secrets lawsuit against former employees OpenAI and Jony Ive's io Products, highlights the steps taken to protect sensitive information, such as contractual, technical, physical, and procedural safeguards.

These measures include mandatory confidentiality training, mandatory return of company devices, and offboarding interviews to ensure access to confidential materials has been revoked. However, The Information's expose highlights several cases where former employees continued to have access to confidential documents even after leaving the company.

This is due to Apple's policy encouraging employees to use their personal Apple IDs for iCloud access, as iPhones and Macs can only be logged into a single primary Apple ID at any given time. This practice, while convenient for employees, has resulted in some files remaining accessible after employees' departure. The report further notes that Apple has been accused of blurring the lines between personal and work devices, which could complicate its efforts to prove it took reasonable measures to safeguard its secrets.

Apple responded to the report, stating that the lawsuit is about OpenAI employees wrongfully obtaining confidential information related to unreleased technologies, processes, and products, and not about documents in iCloud.