Apple's anonymous email function is not as private as many may assume.

      Apple's Hide My Email feature is useful, but don’t think it will keep you safe from law enforcement.

      Apple’s Hide My Email tool is a valuable privacy resource, allowing iCloud+ subscribers to create randomly generated email addresses that redirect messages to their actual inbox. This feature helps users prevent apps and websites from accessing their true addresses. Apple also claims it does not read the forwarded messages.

      This is an effective way to reduce spam, creating a buffer between users and any dubious services seeking their email.

      However, it seems that it does not shield your identity from law enforcement.

      What’s happening?

      Hide My Email on iCloud+. Apple

      As per court documents reviewed by TechCrunch, Apple disclosed the real identities of at least two customers who used Hide My Email addresses to federal agents. In one notable incident, the FBI requested records regarding an email that allegedly threatened Alexis Wilkins, who has been publicly identified as the girlfriend of FBI director Kash Patel.

      The affidavit referenced in the report indicates that Apple associated the anonymized email address with the target account, offering the account holder’s full name and email address, as well as data on another 134 anonymized email accounts generated through this privacy feature.

      TechCrunch also reported on a second search warrant linked to a Homeland Security investigation where Apple similarly provided information connecting Hide My Email accounts back to users.

      Siri Unsplash

      Why should this matter to you?

      Before criticizing Apple for violating privacy, it’s important to understand the difference between corporate privacy practices and legal warrants. Hide My Email is intended to safeguard users from apps, websites, and marketers, not to protect against lawful requests.

      Apple retains customer data, including names, addresses, billing information, and other unencrypted details, which can be disclosed when authorities present the proper legal documentation. Thus, email remains a vulnerable point. Most emails lack end-to-end encryption, making them fundamentally different from services like Signal, which have gained popularity for their strong privacy protections.