Under the mask of privacy

1. Under
the mask of
“Privacy”
by
Olena Solovii
iOS Developer

2. ➜What & Why
➜How To
➜Updates

3. What means “Privacy”?
Are we really need it?

4. “If you're not paying for the product,
you are the product.”

5. “The most personal technology must
also be the most private.”
Tim Cook
CEO, Apple Inc.

6. Main Privacy Principles
Consent ControlTransparency

7. Share with
apps only
what you
want

8. Manage your
data.

9. Good User Experience is consist of...
Users You Privacy

10. Practices
“How To”

11. Identifying
Devices &
Users

12. Anonymous
&
Short-lived
The right way to use:
OS-Provided
API

13. Using OS-provided Identifiers
Universally Unique Identifier
let uuid = UUID()
Random 128-bit value

14. Using OS-provided Identifiers
Vendor Identifier
let idForVendor = UIDevice.current.identifierForVendor
128-bit value for apps with the same team ID

15. ➜ Did this device already consume a
free trial?
➜ Has this device paid for content but
not linked that purchase to an
account?
➜ Was this device previously used for
fraudulent activities?
Identifying devices

16. DeviceCheck
Framework
NE
W

17. DeviceCheck
Framework
Privacy
friendly
Per device
& team ID
Until
developer
reset
Server
oriented
API

18. 00 01
10 11
DeviceCheck
00 01
10 11

19. App
server
Apple

20. App
server
Apple
1. Get generated
token

21. App
server
Apple
1. Get generated
token
2. Send token to
app server

22. App
server
Apple
1. Get generated
token
2. Send token to
app server
3. Set 01

23. App
server
Apple
4. Delete App
5. Re-install app

24. App
server
Apple
6. Get generated
token
7. Send token to
app server
4. Delete App
5. Re-install app

25. App
server
Apple
6. Get generated
token
7. Send token to
app server
8. Request for two
bits
4. Delete App
5. Re-install app

26. App
server
Apple
6. Get generated
token
7. Send token to
app server
8. Request for two
bits
4. Delete App
5. Re-install app
9. Return 01

27. DeviceCheck
➜Handle resold or transferred cases
➜Basing on age
➜Should not affect UI
➜Only part of your logic. Not sole
source!

28. Data collection
for your needs

29. Does people use new feature? How much?

30. How many times user use new feature?

31. How many users engage with new feature more than 10
times?
User 1 False
User 2 True
User 3 True
More than 10 times?
66%

32. Be privacy friendly
➜Use only what you need
➜Don’t use personalised data
➜Base on on-device processing

33. Updates
What’s new in privacy of iOS 11?

34. ➜Core Location
➜Photo Library
➜Core NFC
➜SafariViewCotroller
➜WatchOS
NE
W

35. Core Location

36. Location data
Always Authorization
When In Use Authorization
NSLocationAlwaysUsageDescription
NSLocationWhenInUseUsageDescription

37. Location data NE
W
Always Authorization
When In Use Authorization
NSLocationAlwaysUsageDescription
NSLocationWhenInUseUsageDescription

38. Location data
Always Authorization
When In Use Authorization
NSLocationAlwaysUsageDescription
NSLocationWhenInUseUsageDescription
NSLocationAlwaysAndWhenInUseUsageDescription
NE
W

40. Legacy
Apps

41. Legacy
Apps

42. Photo Library

43. Image
Picker

44. It just
work!

45. func UIImageWriteToSavedPhotosAlbum(_ :)
func UISaveVideoAtPathToSavedPhotosAlbum(_:)
Write-only permission
NSPhotoLibraryAddUsageDescription

46. NFC

47. CoreNFC

48. CoreNFC

49. ➜ Enable NFC Tag Reading Service (in Apple
Developer Center)
➜ Setup Code Signing Entitlement file
➜ Provide NFCReaderUsageDescription key into .plist
CoreNFC - HowTo

50. self.session =
NFCNDEFReaderSession(delegate: self, queue:
DispatchQueue.global(qos: .background),
invalidateAfterFirstRead: false)
self.session?.begin()
CoreNFC - HowTo
➜ Use via NFCNDEFReaderSession

51. func readerSession(_ session:
NFCNDEFReaderSession, didDetectNDEFs
messages: [NFCNDEFMessage]) { }
func readerSession(_ session:
NFCNDEFReaderSession,
didInvalidateWithError error: Error) { }
➜ Use via Delegate
CoreNFC - HowTo

52. Safari View Controller
Domain Cookie
apple.com = iphone 7
facebook.com = hellen

53. Safari View Controller
Domain Domain
apple.com
facebook.com = user 1
NE
W
= iphone 7 apple.com
facebook.com = user 2
= ipad
CookieCookie

54. ➜ Recording allowed to continue
in the background
➜ Required microphone
authorization
➜ Indicator on watch screen
Microphone in WatchOS

55. ...Privacу?

56. Say “Yes”
to the Privacy!
...or Apple will
say “NO” to You :3

57. Say “Yes”
to the Privacy!
...or Your Users will
say “NO” to You :3

58. Any Questions?
Questions?
by
Olena Solovii
iOS Developer