iOS 10 Now Requires User Permission to Access Media Library - MacRumors
Skip to Content

iOS 10 Now Requires User Permission to Access Media Library

by

Apple implemented privacy safeguards on iOS long ago so that when an app requests access to your contacts, calendars, photos, or location, a dialog box pops up asking for express user permission. On iOS 9 and previous software versions, however, that safeguard did not extend to a device's media library.

iOS_10_privacy_media_library
Apple developer Ben Dodson addressed the privacy concern in a blog post in January:

I discovered that there is no privacy prompt when a developer tries to access your library. In fact, they can access all of your music data […] This process happens completely silently and in my tests I was able to loop through a library of 10,000 songs, put all the metadata in a JSON file, and upload it to a server in under 2 seconds!

Apple acknowledged the issue earlier this year, and it has now introduced a new Cocoa key called NSAppleMusicUsageDescription that developers are required to use in all apps which access the media library on iOS 10 or later. This change ensures that users have to grant express permission for an app to access the music library.

NSAppleMusicUsageDescription (String - iOS). This key lets you describe the reason your app accesses the user’s media library. When the system prompts the user to allow access, the value that you provide for this key is displayed as part of the alert.

To protect user privacy, an iOS app linked on or after iOS 10.0, and which accesses the media library, must statically declare the intent to do so. Include the NSAppleMusicUsageDescription key in your app’s Info.plist file and provide a purpose string for this key. If your app attempts to access the media library without a corresponding purpose string, your app exits.

The new requirement will prevent third-party developers from being able to access a user's media library and send data on what's included back to a server without user-granted permission. This includes changes to the media library, which could have been analyzed for advertising or tracking purposes.

Apps that have requested access to your media library are listed in Settings > Privacy > Media Library.

Apple previewed iOS 10 on Monday during its WWDC 2016 keynote, and it has seeded the first beta to developers. A public beta will launch in July ahead of an official release in the fall. iOS 10 is compatible with most iOS 9 devices, excluding the iPhone 4s, iPad 2 and 3, original iPad mini, and fifth-generation iPod touch.

(Thanks, Steve Moser!)

Related Forum: iOS 10

Top Rated Comments

128 months ago
Not being funny, but what kind of metadata is contained within/linked to a song that would bother me if it was uploaded to somebody elses server?
The most worrisome use for this was the ability to perform a comparison on someones music library and use it as sort of a digital fingerprint to track you across apps in the same way the UDID used to.

For example, if two different apps see the exact same music library on two devices they can reasonably assume that's the same person because of how many points of comparison the music library provides.
Score: 17 Votes (Like | Disagree)
canesalato Avatar
128 months ago

=) good old times
Score: 4 Votes (Like | Disagree)
keysofanxiety Avatar
128 months ago
Not being funny, but what kind of metadata is contained within/linked to a song that would bother me if it was uploaded to somebody elses server?
Good point. However that would also beg the question why they would need to do it in the first place. So whether or not it's malicious, it's good to know that they can't access it without prompting.
Score: 4 Votes (Like | Disagree)
128 months ago
Not being funny, but what kind of metadata is contained within/linked to a song that would bother me if it was uploaded to somebody elses server?
Score: 4 Votes (Like | Disagree)
T-Will Avatar
128 months ago
I seriously love Apple's dedication to privacy.
Score: 2 Votes (Like | Disagree)
128 months ago
good, but still, i believe the majority of people just allow everything on each app because they don't care/bother to read the prompts, and they aren't aware of how these privacy breach can possibly do harm.
Score: 2 Votes (Like | Disagree)

Popular Stories

iOS 26

iOS 26.4 Adds Two New Features to CarPlay

Tuesday March 24, 2026 1:55 pm PDT by
iOS 26.4 was released today, and it includes a couple of new features for CarPlay: an Ambient Music widget and support for voice-based chatbot apps. To update your iPhone 11 or newer to iOS 26.4, open the Settings app and tap on General → Software Update. CarPlay will automatically offer the new features so long as the iPhone connected to your vehicle is running iOS 26.4 or later....
Apple Business hero

Apple Unveils 'Apple Business' All-in-One Platform

Tuesday March 24, 2026 8:53 am PDT by
Apple today announced Apple Business, a new all-in-one platform that unifies device management, productivity tools, and customer outreach features. The service is designed to be a consolidated replacement for several of Apple's existing business-focused offerings, including Apple Business Essentials, Apple Business Manager, and Apple Business Connect. It provides organizations with a single...
AirPods Pro Firmware Feature

Apple Releases New Firmware for AirPods Pro 3, AirPods Pro 2 and AirPods 4

Tuesday March 24, 2026 12:31 pm PDT by
Apple today released new firmware for the AirPods Pro 2, AirPods Pro 3, and the AirPods 4. The firmware has a version number of 8B39, up from 8B34 on the AirPods Pro 3, 8B28 on the AirPods Pro 2, and 8B21 on the AirPods 4. There is no word on what's included in the firmware, but Apple has a support document with limited notes. Most updates are limited to bug fixes and performance...