With iOS 27, Apple extends its reach deeper into the daily transactions of its users — checkout counters, shared locations, loyalty cards, hotel stays — yet the company that built its identity on privacy offers no clear account of where that data goes, how long it lingers, or what merchants are permitted to do with it. The convenience is real; the disclosure is not. In an era when trust in technology is negotiated through transparency, Apple's silence on retention is itself a kind of answer.
iOS 27's New Sharing Features Lack Transparency on Data Retention
Apple publishes no retention period anywhere in the material
So iOS 27 is adding three ways to share data—Tap to Share, Find My with time limits, and Wallet card scanning. Why does it matter that Apple isn't saying what happens after?
Because the whole point of sharing is that your data goes somewhere else. If Apple won't say what a merchant keeps, or for how long, you're handing over information without knowing the terms.
But wait—is Apple actually required to disclose what merchants do with data? That's the merchant's privacy policy, not Apple's.
True, but Apple controls the handoff. They could require merchants to disclose retention policies as a condition of using Tap to Share. They haven't.
What about the European Economic Area exclusion? That's strange.
It is. Apple just says Tap to Share isn't available there with no explanation. The EEA has strict data protection rules, so you might assume that's why, but Apple won't confirm it.
That's speculation though. We don't know why it's blocked. Apple could have technical reasons, regulatory reasons, or business reasons. The source material doesn't say.
Fair. What about the Wallet card scanning—where does that happen?
Apple says some tasks run on-device and some go to Private Cloud Compute servers. But they won't say which one handles card scans.
And that matters because if it's on-device, your card data never leaves your phone. If it goes to servers, it does. That's a huge difference in privacy terms.
So the transparency gap is real, but we're also guessing at some of the implications.
Right. Apple has published the features. They haven't published how they work under the hood or what the downstream consequences are.
Der Puls
- Three new iOS 27 features — Tap to Share, Find My time-limited location sharing, and Wallet card scanning — move personal data off your device with a gesture, but Apple's documentation stops precisely at the moment of transfer.
- Tap to Share is quietly blocked across the entire European Economic Area with no explanation offered and no timeline given, raising immediate questions about regulatory friction Apple has chosen not to address publicly.
- Apple's general assurance that Apple Intelligence processes tasks either on-device or through Private Cloud Compute servers provides no clarity on which path any specific feature actually takes, leaving users unable to assess their own exposure.
- The gap between Apple's privacy-forward marketing and the absence of any published retention policies — for expired location shares, scanned passes, split receipts, or hotel key records — is growing harder to overlook.
With iOS 27, Apple extends its reach deeper into the daily transactions of its users — checkout counters, shared locations, loyalty cards, hotel stays — yet the company that built its identity on privacy offers no clear account of where that data goes, how long it lingers, or what merchants are permitted to do with it. The convenience is real; the disclosure is not. In an era when trust in technology is negotiated through transparency, Apple's silence on retention is itself a kind of answer.
Apple's iOS 27 arrives with three new ways to hand your personal information to merchants and contacts: Tap to Share, which beams your email, shipping address, and loyalty details to a nearby iPhone at checkout; expanded Find My controls that let you set expiration times on location sharing; and a Wallet feature that converts physical loyalty cards into digital passes and bundles hotel keys with trip details.
What none of these features come with is any explanation of what happens next. Apple's documentation describes each handoff but says nothing about whether it retains a copy, how long merchant recipients may keep the data, or what they're permitted to do with it. Find My's new expiration controls are listed without any disclosure of whether location data is deleted or archived once sharing ends. The Wallet scanning feature names neither on-device processing nor Private Cloud Compute as its pathway — despite Apple's general claim that its system chooses between the two.
The geographic picture adds another layer of opacity. Tap to Share is blocked entirely in the European Economic Area, with no reason given and no timeline for resolution. Apple acknowledges that Siri AI features are similarly unavailable in the EEA and says it is working toward a path that preserves privacy and security — but offers nothing more specific.
Elsewhere, Apple does publish clear constraints: bill splitting via Apple Cash is U.S.-only, requires an iPhone 18 Pro, and runs through Green Dot Bank. Server-side features carry daily usage caps, and Apple hints that expanded access will eventually require payment. These disclosures stand in contrast to the silence surrounding the new sharing features.
For users who have long accepted Apple's privacy narrative as a meaningful guarantee, the distance between that promise and the actual published record on iOS 27 is worth sitting with. The features are genuinely useful. The transparency owed to users who rely on them has not arrived alongside them.
Apple's iOS 27, arriving Monday, introduces three new ways to share your personal information with merchants and contacts. None of them come with clear answers about what happens to that data once it leaves your phone.
Tap to Share is the most direct handoff. When you're checking out at a store, you can now hold your iPhone near a merchant's iPhone and send over your email address, shipping address, and loyalty account details in one gesture. It requires an iPhone 12 or later. What Apple doesn't say is what the merchant does with those details after they arrive, or whether Apple keeps a copy. The feature description stops at the moment of transfer. There's also no explanation for why Tap to Share is blocked entirely in the European Economic Area, and no timeline for when that might change.
Find My, Apple's location-tracking service, has gained more granular controls. You can now set an expiration time for location sharing, pause it until the end of the day, or stop it at a specific moment you choose. Apple lists these three options in its documentation. It does not say what happens to location data after sharing ends—whether it's deleted, retained for some period, or archived somewhere. There's no device requirement listed either, which is unusual for a feature tied to iOS 27.
Wallet, the app that holds your digital boarding passes and payment cards, can now scan a physical loyalty or membership card with a barcode and convert it into a digital pass you can pin to your Apple Watch's Smart Stack. Hotel keys in Wallet go further, bundling in trip details, activity updates, and information about the property's services. Apple's documentation doesn't specify where these scans happen. The company's general statement is that Apple Intelligence processes some tasks on your device and others through its Private Cloud Compute servers, and that the system "analyzes whether it can be processed on the device or if it requires Private Cloud Compute." But Apple has published no breakdown showing which features use which path, and the Wallet feature description names neither one.
Apple does publish clear restrictions on some other iOS 27 features. Bill splitting with Apple Cash works only in the United States, runs through Green Dot Bank, and requires an iPhone 18 Pro with Siri AI enabled. The receipt is scanned using Siri mode in the Camera app. In the European Economic Area, Apple notes that any feature relying on Siri AI is unavailable for now, and the company says it's "working hard to find a path forward that preserves its users' privacy and security." Server-side features also face daily usage caps; Apple lists Siri AI, intelligent photo editing, Image Playground, and what it calls "AFM 3 Cloud models" in Shortcuts, and hints that expanded access will eventually require payment.
What remains absent from Apple's published materials is the substance of how these sharing features actually work at scale. There's no statement about data retention for a location share after it expires, a scanned pass, a split receipt, or a hotel key record. There's no explanation of what a merchant is permitted to do with the details Tap to Share delivers, or for how long they can keep them. There's no definition of "AFM 3 Cloud models," the term Apple uses for the server infrastructure behind Shortcuts. And there's still no reason given for why Tap to Share doesn't work in the EEA, or when it might.
For users accustomed to Apple's privacy-focused marketing, the gap between what the company promises and what it actually discloses about these new features is worth noticing. The features themselves are convenient. The transparency around them is not.
Bemerkenswerte Zitate
Apple states that Tap to Share is 'not currently available in the European Economic Area' but gives no reason for that, and names no date for a change.— Apple's iOS 27 documentation
Apple says it is 'working hard to find a path forward that preserves its users' privacy and security' regarding features unavailable in the EEA.— Apple's iOS 27 documentation