Is contact privacy even possible on iOS given the SQLite architecture?
I have been digging into the way iOS handles the addressbook.sqlitedb
and I am struggling to see how anyone can claim privacy while the core contact database remains a centralized, unencrypted at runtime pool
for any app with a basic permission toggle.
Is contact privacy even possible on iOS given the SQLite architecture?
I have been digging into the way iOS handles the addressbook.sqlitedb
and I am struggling to see how anyone can claim privacy while the core contact database remains a centralized, unencrypted at runtime pool
for any app with a basic permission toggle.
You're going to have explain with primary sources what exactly the problem is.
An SQLite database is not in and of itself an problem.
Chris wrote:
You're going to have explain with primary sources what exactly the problem >> is.
An SQLite database is not in and of itself an problem.
Hi Chris,
You're asking a good question, and it's healthy for people to learn this.
<https://developer.apple.com/documentation/contacts/accessing-the-contact-store>
On iOS, the contacts database is located here:
/var/mobile/Library/AddressBook/AddressBook.sqlitedb
Any app with the com.apple.security.personal-information.addressbook entitlement can then read it via the "Contacts.framework".
Any app with the com.apple.security.personal-information.addressbook
entitlement can then read it via the "Contacts.framework".
Incorrect. As the first paragraph in the Dev link you shared above states:
"Your app canʼt access a personʼs Contacts entries until that person grants permission. When your app requests access to contact data, the person can grant either limited or full access, or they can deny the request."
The answer to your OP is: Yes, contacts privacy is possible on iOS and is very easy to achieve. Just deny all requests to access your contacts.
Chris wrote:
Any app with the com.apple.security.personal-information.addressbook
entitlement can then read it via the "Contacts.framework".
Incorrect. As the first paragraph in the Dev link you shared above states: >>
"Your app canʼt access a personʼs Contacts entries until that person grants
permission. When your app requests access to contact data, the person can
grant either limited or full access, or they can deny the request."
The answer to your OP is: Yes, contacts privacy is possible on iOS and is
very easy to achieve. Just deny all requests to access your contacts.
Hi Chris,
It's clear from your response that you do not understand iOS contacts privacy, but it's also clear you defend Apple to the death, no matter what, using the first absurd excuse that pops into your head (like they do).
Chris wrote:
Any app with the com.apple.security.personal-information.addressbook
entitlement can then read it via the "Contacts.framework".
Incorrect. As the first paragraph in the Dev link you shared above states: >>
"Your app canʼt access a personʼs Contacts entries until that person grants
permission. When your app requests access to contact data, the person can
grant either limited or full access, or they can deny the request."
The answer to your OP is: Yes, contacts privacy is possible on iOS and is
very easy to achieve. Just deny all requests to access your contacts.
Hi Chris,
It's clear from your response that you do not understand iOS contacts
privacy
but it's also clear you defend Apple to the death, no matter what,
using the first absurd excuse that pops into your head (like they do).
Notice you're acting like Snit & Alan Baker
On May 3, 2026 at 10:27:04 AM MST, "Maria Sophia" wrote <10t80h8$rfh$1@nnrp.usenet.blueworldhosting.com>:
Chris wrote:
Any app with the
com.apple.security.personal-information.addressbook entitlement can
then read it via the "Contacts.framework".
Incorrect. As the first paragraph in the Dev link you shared above
states:
"Your app canʼt access a personʼs Contacts entries until that
person grants permission. When your app requests access to contact
data, the person can grant either limited or full access, or they
can deny the request."
The answer to your OP is: Yes, contacts privacy is possible on iOS
and is very easy to achieve. Just deny all requests to access your
contacts.
Hi Chris,
It's clear from your response that you do not understand iOS contacts
privacy, but it's also clear you defend Apple to the death, no matter
what, using the first absurd excuse that pops into your head (like
they do).
What is clear is that you are
Brock McNuggets <brock.mcnuggets@gmail.com> wrote in news:69f78d64$1$25$882e4bbb@reader.netnews.com:
On May 3, 2026 at 10:27:04 AM MST, "Maria Sophia" wrote
<10t80h8$rfh$1@nnrp.usenet.blueworldhosting.com>:
Chris wrote:
Any app with the
com.apple.security.personal-information.addressbook entitlement can
then read it via the "Contacts.framework".
Incorrect. As the first paragraph in the Dev link you shared above
states:
"Your app canʼt access a personʼs Contacts entries until that
person grants permission. When your app requests access to contact
data, the person can grant either limited or full access, or they
can deny the request."
The answer to your OP is: Yes, contacts privacy is possible on iOS
and is very easy to achieve. Just deny all requests to access your
contacts.
Hi Chris,
It's clear from your response that you do not understand iOS contacts
privacy, but it's also clear you defend Apple to the death, no matter
what, using the first absurd excuse that pops into your head (like
they do).
What is clear is that you are
A troll Brock McNuggets, snit, Michael Glasser or whatever your nym of
the week is.
For those who may not be aware, here is a bit of information on the brock McNuggets troll.
It's best to bin him.
https://tinyurl.com/WhatIsSnit
https://tinyurl.com/Snitliesmethods
https://tinyurl.com/Snit-Reviews
This Brock fool has been trolling USENET for at least 20 years.
Let that sink in.
For those who may not be aware, here is a bit of information on the brock McNuggets troll.
It's best to bin him.
It's clear from your response that you do not understand iOS contacts
privacy
The onus is on you to demonstrate the problem without innuendo nor assumption.
Brock McNuggets <brock.mcnuggets@gmail.com> wrote in news:69f78d64$1$25$882e4bbb@reader.netnews.com:
On May 3, 2026 at 10:27:04 AM MST, "Maria Sophia" wrote
<10t80h8$rfh$1@nnrp.usenet.blueworldhosting.com>:
Chris wrote:
Any app with the
com.apple.security.personal-information.addressbook entitlement can
then read it via the "Contacts.framework".
Incorrect. As the first paragraph in the Dev link you shared above
states:
"Your app canʼt access a personʼs Contacts entries until that
person grants permission. When your app requests access to contact
data, the person can grant either limited or full access, or they
can deny the request."
The answer to your OP is: Yes, contacts privacy is possible on iOS
and is very easy to achieve. Just deny all requests to access your
contacts.
Hi Chris,
It's clear from your response that you do not understand iOS contacts
privacy, but it's also clear you defend Apple to the death, no matter
what, using the first absurd excuse that pops into your head (like
they do).
What is clear is that you are
A troll Brock McNuggets, snit, Michael Glasser or whatever your nym of
the week is.
For those who may not be aware, here is a bit of information on the brock McNuggets troll.
It's best to bin him.
https://tinyurl.com/WhatIsSnit
https://tinyurl.com/Snitliesmethods
https://tinyurl.com/Snit-Reviews
On 03 May 2026 21:46:29 GMT, AZP wrote:
Brock McNuggets <brock.mcnuggets@gmail.com> wrote in
news:69f78d64$1$25$882e4bbb@reader.netnews.com:
On May 3, 2026 at 10:27:04 AM MST, "Maria Sophia" wrote
<10t80h8$rfh$1@nnrp.usenet.blueworldhosting.com>:
Chris wrote:
Any app with the
com.apple.security.personal-information.addressbook entitlement can >>>>>> then read it via the "Contacts.framework".
Incorrect. As the first paragraph in the Dev link you shared above
states:
"Your app canʼt access a personʼs Contacts entries until that
person grants permission. When your app requests access to contact
data, the person can grant either limited or full access, or they
can deny the request."
The answer to your OP is: Yes, contacts privacy is possible on iOS
and is very easy to achieve. Just deny all requests to access your
contacts.
Hi Chris,
It's clear from your response that you do not understand iOS contacts
privacy, but it's also clear you defend Apple to the death, no matter
what, using the first absurd excuse that pops into your head (like
they do).
What is clear is that you are
A troll Brock McNuggets, snit, Michael Glasser or whatever your nym of
the week is.
For those who may not be aware, here is a bit of information on the brock
McNuggets troll.
It's best to bin him.
https://tinyurl.com/WhatIsSnit
https://tinyurl.com/Snitliesmethods
https://tinyurl.com/Snit-Reviews
Good advice.
Avoid this Brock joker because he will nymshift all over the place in
order to back his own stupid claims.
This Brock fool has been trolling USENET for at least 20 years.
Let that sink in.
Anonymous wrote:
This Brock fool has been trolling USENET for at least 20 years.
Let that sink in.
Notice that this Snit troll defends Apple to the death, no matter what,
using the first inanely absurd excuse that suddenly pops into his mind.
In this video, Snit claims iOS can graph wi-fi & cellular signal strength (which is measured in decibels, by the way) because he sees a moving graph.
<https://youtu.be/7QaABa6DFIo>
Remember the lemon-juice bank robber who inspired Dunning-Kruger papers? That's Snit.
AZP wrote:
For those who may not be aware, here is a bit of information on the brock
McNuggets troll.
It's best to bin him.
Notice that this Snit troll defends Apple to the death, no matter what,
using the first inanely absurd excuse that suddenly pops into his mind.
In this thread, he defends Apple to the death by saying, in effect, because he isn't aware of privacy issues with iOS contacts, then they can't exist.
That's Snit.
He's like the classic lemon-juice bank robber Dunning & Kruger studied.
Chris wrote:
It's clear from your response that you do not understand iOS contacts
privacy
The onus is on you to demonstrate the problem without innuendo nor
assumption.
Hi Chris,
The point of this thread is to find a way for better iOS contacts privacy. The same question was asked on the Android newsgroup so it is a fair goal.
The very fact the user has no idea which contact permissions are being
asked for is a problem.
And that messages can't be made private is too.
Whether you comprehend it or not, iOS does not granularize permissions by field so the prompt simply does not enumerate what the app will access.
I've known this for years.
But I had never tried to solve this privacy flaw until recently.
It's widely known to people who understand privacy that the only real solution is keeping contacts out of the system address book entirely,
To solve this privacy issue, I dug deeper to find that privacy-focused contacts apps do exist on iOS, and several of them explicitly solve the
some of the "separate, encrypted, not visible to other apps" problems.
Given the fact that...
a. iOS cannot granularize Contacts permissions by field.
b. iOS cannot show which fields an app will access.
c. iOS cannot granularize Contacts permissions by field.
d. iOS cannot show which fields an app will access.
e. iOS cannot replace the system dialer with a privacy-aware one.
So the only viable path is keeping sensitive contacts out of the system database entirely, which is the goal that I seek to solve in this thread.
The strongest options today appear to be Savelon, Stealth Contacts and GhostContact, all of which create independently private contact stores that are not exposed through the system Contacts framework.
Savelon, for example, (which also works on Android & macOS) has
a. 256-bit on-device encryption
b. No cloud, no servers, open source
c. Completely separate contact store
d. Password-protected backups
e. Designed specifically for private contacts
<https://savelon.com/>
Perhaps better, Stealth Contacts, which allows seeing the caller's name without putting them in the system Contacts database, has a
a. Private vault with Face ID / passcode
b. Caller ID works even though contacts are not in system Contacts
c. Invisible to all other apps
d. Never appears in Spotlight, call history, or search
e. Optional iCloud sync that does not touch iCloud Contacts
<https://apps.apple.com/us/app/stealth-contacts/id6760033667>
Similar to Stealth Contacts but simpler is Ghost Contacts which also
shows caller ID using the CXCallDirectoryProvider, which
a. Creates a second, private contact list
b. Caller ID works without adding to system Contacts
c. Data stored only on device
d. No access by other apps
<https://apps.apple.com/us/app/ghostcontact-private-contacts/id6742730895>
Even after enabling the CallKit extension in
Settings > Phone > Call Blocking & Identification.
there are still unplugged iOS privacy holes in call logs and in messages.
The call log leak:
Even if a contact is in a "Stealth" vault, when the call ends, the phone number will still appear in our native Phone app's "Recents" tab.
It just won't have a name attached to it. If an app has "Call Log" access
it can see the metadata of the call, just not the identity of the caller.
The messages leak:
Even if a contact lives entirely inside a Stealth-style vault, iOS Messages still exposes the phone number because Messages only consults the system database, not any private contact store. Incoming texts create a permanent thread tied to the raw number, which is then indexed by Spotlight,
suggested by Siri, shown in the share sheet,
and stored in the Messages
database (and in iCloud if syncing is enabled). The identity stays hidden, but the number, timestamps, and conversation metadata remain visible to the OS and to any app with notification or message-related access.
For example, to see "John Doe" in our text messages, we are forced to add him to the system Contacts. Once we do that, the privacy "wall" is broken.
Every other app with contact permission (Facebook, TikTok, etc.)
can now see that contact,
and specifically, if they get the Notes
field, if you put a gate code in that field, those third-party
apps can now steal that code (if they request that field).
On iOS, we can have a "Private Dialer" experience, but we cannot
currently have a "Private Texter" experience while using the native
Messages app. To keep our identity safe in texts, we have to use an
entirely different app like Signal, which maintains its own internal
(and private) contact list.
For those who may not be aware, here is a bit of information on the brock
McNuggets troll.
It's best to bin him.
https://tinyurl.com/WhatIsSnit
https://tinyurl.com/Snitliesmethods
https://tinyurl.com/Snit-Reviews
Growing up, when people had to pick players for their team and Snit
Michael Glasser Prescott Parasite and Computer Guy was last, the team preferred not to play than to pick him.
The point of this thread is to find a way for better iOS contacts privacy. >> The same question was asked on the Android newsgroup so it is a fair goal.
Which is going as well as the majority of your so-called questions. 6/9 of posts are from you.
The very fact the user has no idea which contact permissions are being
asked for is a problem.
"no idea" is an exaggeration. Privacy and permissions are pretty clear.
And that messages can't be made private is too.
Whether you comprehend it or not, iOS does not granularize permissions by >> field so the prompt simply does not enumerate what the app will access.
It's still under your control, if that level of granularity matters to you.
I've known this for years.
But I had never tried to solve this privacy flaw until recently.
"flaw" is very subjective.
It's widely known to people who understand privacy that the only real
solution is keeping contacts out of the system address book entirely,
To solve this privacy issue, I dug deeper to find that privacy-focused
contacts apps do exist on iOS, and several of them explicitly solve the
some of the "separate, encrypted, not visible to other apps" problems.
With some significant usability compromises.
Given the fact that...
a. iOS cannot granularize Contacts permissions by field.
b. iOS cannot show which fields an app will access.
c. iOS cannot granularize Contacts permissions by field.
d. iOS cannot show which fields an app will access.
e. iOS cannot replace the system dialer with a privacy-aware one.
Two of the "facts" are duplicated.
The call log leak:
The messages leak:
Only if the user enables that.
and stored in the Messages
database (and in iCloud if syncing is enabled). The identity stays hidden, >> but the number, timestamps, and conversation metadata remain visible to the >> OS and to any app with notification or message-related access.
Again only if sharing is enabled.
For example, to see "John Doe" in our text messages, we are forced to add >> him to the system Contacts. Once we do that, the privacy "wall" is broken.
Incorrect. The data is not shared with any other app without explicit permission.
Every other app with contact permission (Facebook, TikTok, etc.)
can now see that contact,
Only if you have provided complete access to your access to all apps.
and specifically, if they get the Notes
field, if you put a gate code in that field, those third-party
apps can now steal that code (if they request that field).
A gate code? If that's secure access information, I would argue that should go in a password manager. Not a contacts app.
On iOS, we can have a "Private Dialer" experience, but we cannot
currently have a "Private Texter" experience while using the native
Messages app. To keep our identity safe in texts, we have to use an
entirely different app like Signal, which maintains its own internal
(and private) contact list.
Correct. The model in iOS (and Android and other mainstream OSes TBF) is to balance usability with privacy. If you want more privacy at the expense of usability, you need to go with alternative providers.
This is not an obvious flaw or failure of ios or android.
Thanks for explaining this issue you have thoroughly. As I've highlighted there are some shortcomings in your assumptions.
Chris wrote:
The point of this thread is to find a way for better iOS contacts privacy. >>> The same question was asked on the Android newsgroup so it is a fair goal. >>Which is going as well as the majority of your so-called questions. 6/9 of >> posts are from you.
Hi Chris,
I'm going to ignore your incessant attacks,
especially since we've made
progress on Android privacy, essentially solving the problem set there.
You constantly throwing insults that are the first absurd insult you can think of, not only doesn't "hurt my feelings", but is untoward of you.
Stop it.
Act like an adult.
Either add on-topic adult value, or stop throwing the first absurd insult
you can think of, which doesn't add any value to the technical value.
I'm going to open a thread which catalogs the insults thrown in response to
a technical topic starting in fifteen minutes, so we can catalog these.
Newsgroups: misc.phone.mobile.iphone,comp.sys.mac.advocacy,comp.mobile.ipad
Subject: Log of incessant insults thrown in this newsgroup that add no on-topic value
Date: Mon, 4 May 2026 11:49:09 -0600
Message-ID: <10tam6m$490$1@nnrp.usenet.blueworldhosting.com>
The hope is neither anyone nor I throw insults at each other forevermore
in the hopes of derailing a topic such as this one about iOS contacts.
Game?
Anonymous wrote:
This Brock fool has been trolling USENET for at least 20 years.
Let that sink in.
Notice that this Snit troll defends Apple to the death, no matter what,
using the first inanely absurd excuse that suddenly pops into his mind.
In this video, Snit claims iOS can graph wi-fi & cellular signal strength (which is measured in decibels, by the way) because he sees a moving graph.
<https://youtu.be/7QaABa6DFIo>
Remember the lemon-juice bank robber who inspired Dunning-Kruger papers? That's Snit.
On Sun, 3 May 2026 22:45:43 -0600, Maria Sophia wrote:
Anonymous wrote:
This Brock fool has been trolling USENET for at least 20 years.
Let that sink in.
Notice that this Snit troll defends Apple to the death, no matter what,
using the first inanely absurd excuse that suddenly pops into his mind.
In this video, Snit claims iOS can graph wi-fi & cellular signal strength
(which is measured in decibels, by the way) because he sees a moving graph. >> <https://youtu.be/7QaABa6DFIo>
It's well known that snit's technical knowledge is less than zero.
He also has a voice like a fagala. Some claim he/she/it is a queen
which if true shouldn't surprise anyone.
Remember the lemon-juice bank robber who inspired Dunning-Kruger papers?
That's Snit.
I did not but I looked it up and yes that's about the level of mental
acuity snit displays.
Read all about the snit troll here.
https://tinyurl.com/WhatIsSnit
https://tinyurl.com/Snitliesmethods
https://tinyurl.com/Snit-Reviews
Remember the lemon-juice bank robber who inspired Dunning-Kruger papers?
That's Snit.
I did not but I looked it up and yes that's about the level of mental
acuity snit displays.
Chris wrote:
Given the fact that...
a. iOS cannot granularize Contacts permissions by field.
b. iOS cannot show which fields an app will access.
c. iOS cannot granularize Contacts permissions by field.
d. iOS cannot show which fields an app will access.
e. iOS cannot replace the system dialer with a privacy-aware one.
Two of the "facts" are duplicated.
Stop it. So what? I spent HOURS writing that post and made many edits.
Maria Sophia <mariasophia@comprehension.com> wrote:
Chris wrote:
Given the fact that...
a. iOS cannot granularize Contacts permissions by field.
b. iOS cannot show which fields an app will access.
c. iOS cannot granularize Contacts permissions by field.
d. iOS cannot show which fields an app will access.
e. iOS cannot replace the system dialer with a privacy-aware one.
Two of the "facts" are duplicated.
Stop it. So what? I spent HOURS writing that post and made many edits.
Lol. You spend "hours" on a post and *still* get so much wrong!? You need
to get a different hobby.
Lol. You spend "hours" on a post and *still* get so much wrong!?
On 2026-05-07, Chris <ithinkiam@gmail.com> wrote:
Maria Sophia <mariasophia@comprehension.com> wrote:
Chris wrote:
Given the fact that...
a. iOS cannot granularize Contacts permissions by field.
b. iOS cannot show which fields an app will access.
c. iOS cannot granularize Contacts permissions by field.
d. iOS cannot show which fields an app will access.
e. iOS cannot replace the system dialer with a privacy-aware one.
Two of the "facts" are duplicated.
Stop it. So what? I spent HOURS writing that post and made many edits.
Lol. You spend "hours" on a post and *still* get so much wrong!? You need
to get a different hobby.
Dude literally spends all of his time weak trolling news groups for
products he hates with every fiber of his being. Fucking pathetic excuse
of a human being.
Chris wrote:
Lol. You spend "hours" on a post and *still* get so much wrong!?
Ignoring your incessant insults, if the only thing you can find wrong with the technical discussion is a typographical error, then you agree, Chris.
It's impossible to have iOS contacts privacy due to stated privacy flaws.
Chris wrote:
Lol. You spend "hours" on a post and *still* get so much wrong!?
Ignoring your incessant insults, if the only thing you can find wrong with the technical discussion is a typographical error, then you agree, Chris.
It's impossible to have iOS contacts privacy due to stated privacy flaws.
Ignoring your incessant insults, if the only thing you can find wrong with >> the technical discussion is a typographical error, then you agree, Chris.
You commented on the four or five other errors I found.
It's impossible to have iOS contacts privacy due to stated privacy flaws.
False.
Chris wrote:
Ignoring your incessant insults, if the only thing you can find wrong with >>> the technical discussion is a typographical error, then you agree, Chris. >>You commented on the four or five other errors I found.
Hi Chris,
I explained how iOS contacts work with respect to inherent privacy flaws.
All you ever do when you attempt to refute facts, is you say all facts are wrong, but you never seem to show any indication you know how it works.
It was clear to me, from what you wrote, you have no idea how it works.
Hence, you just claiming everything is wrong without explaining how you
think it works, is not something that anyone can possibly discuss with you.
It's impossible to have iOS contacts privacy due to stated privacy flaws. >>False.
I explained very clearly where iOS contacts privacy is impossible, Chris.
For you to simply say 'false', means you actually agree with me, Chris.
But I won't be hard on you as it's clear you have no idea how contacts
work, so I think you're just saying "false" because you don't like that I shoed that it's impossible (as far as we know) to have iOS contacts
privacy.
Note, it's very clear, to me, which I explained in earlier threads and on
the Android newsgroup, that iOS contacts are certainly "more private" than Android contacts, out of the box.
But while you can easily make Android contacts private, it's impossible to make iOS contacts private (unless, of course, you jailbreak the device).
| Sysop: | DaiTengu |
|---|---|
| Location: | Appleton, WI |
| Users: | 1,116 |
| Nodes: | 10 (0 / 10) |
| Uptime: | 87:40:09 |
| Calls: | 14,305 |
| Files: | 186,338 |
| D/L today: |
1,189 files (372M bytes) |
| Messages: | 2,525,524 |