Apple's Find My crowdsources your lost laptop's location — and even Apple can't see it

When Apple announced the merged Find My feature at WWDC in June 2019, it sounded like a privacy disaster in waiting: iPhones would silently relay the locations of nearby unknown Apple devices to the cloud. Apple's answer was an encryption scheme designed so that the crowd never learns whose device it is reporting, and Apple never learns the location at all.

Each device broadcasts a public key that rotates constantly to a new, uncorrelatable number. A stranger's iPhone picks up the beacon from a stolen, offline MacBook, tags its own location, encrypts it with the public key, and uploads the ciphertext with a hash of the key. Apple's servers hold millions of encrypted locations it cannot read. When the owner searches, a second Apple device — which holds the same private key — submits the matching hash so Apple can find the record and decrypt it on the owner's device.

The scheme denies marketers the ability to build location histories from Bluetooth beacons, denies thieves any way to know they are being tracked, and improves on Apple's older Find My iPhone, which offered no such safeguards against Apple itself.

Constantly rotate each device's public key: strangers encrypt your location with it, only your own second device can decrypt, and Apple stores what it cannot read.

Key rotation breaks linkability: the same device looks different from one hour to the next.

The asymmetric split means the crowd can encrypt for you but never decrypt what it collected.

Apple's servers store only ciphertext and hashes, so the company structurally cannot know device locations.

Piggybacking on existing Bluetooth traffic made the relay free in battery and data terms.

Privacy engineering can be structural: end-to-end encryption where the key never leaves the owner's devices lets a crowd of strangers become your locator without becoming your surveillant.

Apple described the system for upcoming iOS and macOS releases and declined to say how often keys rotate. Johns Hopkins cryptographer Matthew Green's verdict: 'I have not seen anyone actually deploy anything like this to a billion people.'