Is Apple Intelligence Safe? Privacy on Practice Macs
Run the practice on Macs? See what Apple Intelligence processes on the device, what goes to Private Cloud Compute and when ChatGPT gets client text.
- Published
- Updated
It depends: Apple Intelligence’s privacy protections change when a request stays on your device, goes to Private Cloud Compute or reaches ChatGPT.
Is Apple Intelligence Safe for Client Material?
Apple Intelligence can process client material on your device, but you cannot assume every request stays there. Approve the particular feature and destination before staff use identifiable client information.
Apple’s privacy notice distinguishes local processing from server processing. Priority Notifications uses an on-device model. More demanding requests can go to Private Cloud Compute (PCC), where Apple says content is processed for the request and then discarded.
That distinction matters when a staff member summarises a client email. The email being open on a practice Mac does not establish that the summary is generated locally. Choosing ChatGPT introduces a separate provider with separate terms.
In Australia, Apple Intelligence runs on supported devices. Apple lists English (Australia) for Writing Tools and other features. Availability depends on the device, operating system and feature, so an older practice Mac may have different options.
For a practice policy, distinguish anonymous drafting from client work. A fictional reminder contains different information from a client’s email about their income or health. Start with fictional text when checking settings and document which uses staff may make.
How Private Cloud Compute Works
Private Cloud Compute processes larger requests on servers under Apple’s privacy architecture. The device checks that a server runs approved, publicly logged software before sending an encrypted request.
Apple’s PCC architecture description says the server uses request data only to produce the response. It deletes that data afterwards and prevents Apple staff from accessing it, including through ordinary server-administration access.
Encryption protects the request on its journey to the approved server. The model still needs the readable content inside that protected environment to answer.
PCC therefore involves off-device processing even though Apple says it cannot access or retain the content.
PCC also extends beyond Apple’s own hardware. Apple’s expanded PCC design describes workloads on Google Cloud with confidential computing and Apple-approved software. A practice must assess cloud processing without assuming every request runs in an Apple-owned data centre.
What Independent Research Establishes
Independent examination has tested parts of PCC and found limits. A 2026 WiSec study reverse-engineers the device-side implementation and enables custom queries. It identifies obstacles to verification, including compiled software without reproducible builds.
Sentry’s published PCC security research reports a flaw that redirected request metadata in Apple’s research environment. A modified server configuration passed the attestation checks examined. The report says Apple fixed the issue in PCC release 5E290.3 and later.
That finding concerns a research environment, not evidence that practice documents were stolen from production. It shows why inspectable software and published research strengthen scrutiny without proving every privacy claim or ruling out future defects.
Check a Practice Device
Use fictional material to inspect off-device activity before approving a feature for client work.
- On Mac, open System Settings, then Privacy & Security and Apple Intelligence & PCC Report. Select a reporting duration.
- Run the intended task with fictional text, then export the report. Inspect which off-device requests it records.
- Review Analytics & Improvements separately. Turn off Share Mac Analytics if your practice does not authorise that sharing.
On iPhone, the report and Analytics & Improvements sit under Settings, then Privacy & Security. Earlier software calls the report Apple Intelligence Report.
Treat an empty report as an observation about the recorded period, not proof every feature works locally.
The ChatGPT Extension
The ChatGPT extension sends a selected request to OpenAI when you use it through Siri or supported writing features. Apple’s extension notice says the extension starts switched off and must be enabled before information is sent.
If Siri suggests ChatGPT, it normally asks for confirmation. An explicit instruction to ask ChatGPT goes directly to that service. Turning off Confirm ChatGPT Requests also removes the ordinary confirmation step. Writing Tools lets you choose the extension separately.
Without a ChatGPT account, Apple says OpenAI must use the request to answer it, cannot train on it and cannot retain it unless law requires. With an account connected, that account’s settings and OpenAI’s policies apply.
The request can include document content or attachments you choose to send. Apple obscures the IP address, but ChatGPT receives an approximate location and limited request information. Hiding the IP address does not remove client details from the text.
Switch the Extension Off
On devices using Apple Intelligence & Siri settings, open ChatGPT and turn off Use ChatGPT. On Mac this is in System Settings, and on iPhone it is in Settings.
Newer software places ChatGPT under Siri. If Siri AI is active, open Extensions, then ChatGPT and turn off Use Extension. Apple’s iPhone instructions describe these different settings.
Confirm the relevant switch is off on each practice device. Turning this extension off blocks that route to ChatGPT, while PCC remains a separate consideration.
If the practice permits a connected account, assess its ChatGPT privacy terms before staff send client material.
One client form. One finished return.
Your client completes one guided form. Tax Genie checks it, chases mistakes and sends the details to your engagement letter and tax software.
Made for Australian accounting firms