Popular iPhone and iPad Apps Reportedly 'Snooping' on Pasteboard Data - MacRumors
Skip to Content

Popular iPhone and iPad Apps Reportedly 'Snooping' on Pasteboard Data

According to new research by Talal Haj Bakry and Tommy Mysk, dozens of popular iOS apps are reading the contents of the pasteboard without user consent, which could include sensitive information.

pasteboard screenshot

The investigation discovered that many popular apps, such as TikTok, 8 Ball Pool™, and Hotels.com, quietly read any text found in the pasteboard every time the app is opened.

iOS and iPadOS apps have unrestricted access to the system-wide pasteboard, also known as the clipboard, as of iOS 13.3.

Text left in the pasteboard may be inconsequential, but it could also be highly sensitive data such as passwords or financial information. The potential security risks of this vulnerability have previously been investigated by Bakry and Mysk, where they found that precise location information was leaking through the system pasteboard.

A diverse range of apps, from popular games and social networking apps, to news apps of major news organizations such as Fox News or The Wall Street Journal, were examined using standard Apple development tools. Many of these apps do not provide any UI that manages text, yet they read the text content of the pasteboard every time they are opened.

It is also of note that if Universal Clipboard is enabled, an app may also access whatever has been copied on a Mac.

What exactly these apps do with the contents of the pasteboard once they have read it is unknown.

Tag: iOS 13

Popular Stories

M5 MacBook Pro

RIP, MacBook Ultra

Monday October 19, 2026 9:37 am PDT by
Apple today sent out invites for an experience in Los Angeles on Wednesday, October 28, and the "Pro and tell" tagline on the invitation likely means that the rumored MacBook models with touch-enabled OLED displays will stick with MacBook Pro branding instead of the once-rumored "MacBook Ultra" name. The long-rumored "iPhone Ultra" ended up being named iPhone Duo, so speculation that Apple...
iPhone Duo Trio

Here's What Apple's Apps Look Like on the iPhone Duo

Tuesday October 20, 2026 11:12 am PDT by
With just three days to go until the iPhone Duo is released, Apple is getting ready for the launch. Behind the scenes, the App Store now has screenshots of Apple's built-in apps running on the Duo. We've seen some apps in marketing materials, but images of the ones we haven't seen give us an idea of what it will be like using the iPhone Duo day to day. Many apps are shown in landscape...
apple pro tell logo

Apple Announcing New Products Next Week: 'Pro and Tell'

Monday October 19, 2026 9:05 am PDT by
Apple's Greg Joswiak today hinted at new product announcements coming next week, sharing a social media post that says "Can't wait to pro and tell next week." Rumors suggest Apple is planning to debut the new MacBook Pro with an OLED touchscreen display, an M6 entry-level MacBook Pro, an M6 iMac, an iPad mini with an OLED display. Can't wait to pro and tell next week....

Top Rated Comments

Mascots Avatar
86 months ago
I assume we'll get an additional permissions dialog to cover this soon.

It can be useful: in many instances, apps will read the pasteboard to determine if a URL or other information (like numbers related to their services) were copied from the browser so the app can shortcut a response to that data. One of my favorite instances is Deliveries: If you have a copied tracking number or link, it'll ask and can automatically start the adding process for you.

But I also get how allowing anyone to freely read it can be a major issue.
Score: 23 Votes (Like | Disagree)
BWhaler Avatar
86 months ago
Apple should just have a policy that any action like this, which takes customer data in a way which is not part of the core experience and not intuitive to the user based on the nature of the app will result in an immediate and lifetime ban.

all this crap would stop. Otherwise, if it’s just rule after rule, but in a culture of stealing personal data, Apple will never catch up.. App publishers will think of ways around the rules or do something not covered yet by a rule—like stealing clipboard info. Just make it a death sentence for your business if you steal customer data will result in a lifetime ban. Then it will stop—at least from the big companies.

It’s like the government Rico statues. Very broad but allows any type of organized crime to be prosecuted.

ive deleted every app I don’t absolutely need on my phone. I now don’t download apps just to play with for awhile because I don’t know what tricks they play with my data and how they track me. And no, a privacy policy which no human reads doesn’t solve the problem.

And I don’t want tons of security dialogs and privacy settings which take time and constant surveillance to monitor. It’s facebook’s dirty trick, and iOS privacy settings are becoming equally cumbersome.

As more and more apps become spyware in ways consumers cannot imagine, it will kill the core of the app economy.
Score: 20 Votes (Like | Disagree)
86 months ago
I do not trust a single app nowadays. Especially on iOS, iPadOS, watchOS. (As opposed to macOS. Android apps are at another level of badness.)

Why?

Most companies are too cheap to hire the skills to develop their app from scratch. So they outsource the development to 3rd parties who use code from all over the place without even knowing what it does. So even if the company putting the app out doesn’t have malicious intent, in reality they themselves have no idea what the app really does beneath the hood.

Look at apps from even reputable companies like AT&T and Comcast and they are so buggy and have such a poor, unfriendly UI, you know they are orphan projects within the company with tiny budgets and little oversight.

Kind of like Apple “discovering” that one of its suppliers is using child labor, because they have no idea what is really going on at their outsourced partners.
Score: 17 Votes (Like | Disagree)
86 months ago
I would like to see an option in the iOS settings to clear the pasteboard on a regular basis. If I copy something in one app and paste it in another app I don’t need that content anymore, so have it being cleared for example every 30 seconds would be no problem for me.
Score: 16 Votes (Like | Disagree)
86 months ago
That is why I try to use as much Apple apps as possible. And everything else done within the browser.
Score: 9 Votes (Like | Disagree)
Porco Avatar
86 months ago
I would welcome a system-wide default to restrict all reading of the copy/paste buffer to be purely manually-instigated by the user, always. I have often thought this was a potential issue and behaved accordingly, but I don’t think it’s something the average user should have to worry about, the default should be to block reading it unless given specific, informed permission.
Score: 9 Votes (Like | Disagree)
Latest Stories
Simplicity and Siri AI Are HomeView's Killer Features, Apple Says
Simplicity and Siri AI Are HomeView's Killer Features, Apple Says
22 minutes ago
iPhone Duo Reviewers Really Miss Face ID
iPhone Duo Reviewers Really Miss Face ID
5 hours ago
Does the iPhone Duo Run Hot? Here's What Reviews Found
Does the iPhone Duo Run Hot? Here's What Reviews Found
7 hours ago
Apple Music's New Look is Now Live on Apple's Website
Apple Music's New Look is Now Live on Apple's Website
7 hours ago
Anthropic Launches Claude Duet, a Proactive AI Agent
Anthropic Launches Claude Duet, a Proactive AI Agent
8 hours ago
What 32,000 Folds Did to the iPhone Duo's Hinge
What 32,000 Folds Did to the iPhone Duo's Hinge
9 hours ago
iPhone Duo's Hidden FaceTime Camera Takes 'Trash' Photos
iPhone Duo's Hidden FaceTime Camera Takes 'Trash' Photos
10 hours ago
iPhone Duo Has 'Edge Light' Feature That Debuted on Macs Last Year
iPhone Duo Has 'Edge Light' Feature That Debuted on Macs Last Year
11 hours ago
Apple Support App Updated for iPhone Duo's Larger Display
Apple Support App Updated for iPhone Duo's Larger Display
11 hours ago
Amazon Sweetens the Deal on Entry-Level 16-Inch MacBook Pro With $570 Off
Amazon Sweetens the Deal on Entry-Level 16-Inch MacBook Pro With $570 Off
11 hours ago
iPhone Duo Tips Over on MagSafe Stands When Unfolded
iPhone Duo Tips Over on MagSafe Stands When Unfolded
11 hours ago
Apple Music's New Look Officially Announced
Apple Music's New Look Officially Announced
13 hours ago
iPhone Duo Supports Apple Pencil Starting With iOS 27.2
iPhone Duo Supports Apple Pencil Starting With iOS 27.2
14 hours ago
iPhone Duo Accessories Roundup: Cases and Screen Protectors From OtterBox, ZAGG, and More
iPhone Duo Accessories Roundup: Cases and Screen Protectors From OtterBox, ZAGG, and More
14 hours ago
Apple Stores Will Have 'Limited' Availability of iPhone Duo for Walk-In Customers
Apple Stores Will Have 'Limited' Availability of iPhone Duo for Walk-In Customers
15 hours ago
iPhone Duo Reviews Explain Why Device is Both 'Fun' and 'Frustrating'
iPhone Duo Reviews Explain Why Device is Both 'Fun' and 'Frustrating'
15 hours ago
Apple Says 'Reachability' Feature Coming to iPhone Duo Later This Year
Apple Says 'Reachability' Feature Coming to iPhone Duo Later This Year
16 hours ago
Loop Capital Cuts Apple Rating Over iPhone Sales Outlook
Loop Capital Cuts Apple Rating Over iPhone Sales Outlook
20 hours ago
Apple Stores in Bordeaux and Lille Looted During French Protests
Apple Stores in Bordeaux and Lille Looted During French Protests
20 hours ago
Bluesound Adds Native Apple Music Support
Bluesound Adds Native Apple Music Support
21 hours ago
Apple CEO John Ternus Explains What Makes Good Product Design
Apple CEO John Ternus Explains What Makes Good Product Design
22 hours ago
UK Proposes New Ways to Help Apple Pay Rivals
UK Proposes New Ways to Help Apple Pay Rivals
1 day ago
WhatsApp Developing In-App Browser for All Chat Links on iPhone
WhatsApp Developing In-App Browser for All Chat Links on iPhone
1 day ago
Apple's App Store Chief Explains Its Push for Premium Games
Apple's App Store Chief Explains Its Push for Premium Games
1 day ago
Apple Could Owe Even More After $5.7 Billion Patent Verdict
Apple Could Owe Even More After $5.7 Billion Patent Verdict
1 day ago
Skyrim Comes to Apple Silicon Macs With New Unofficial Installer
Skyrim Comes to Apple Silicon Macs With New Unofficial Installer
1 day ago
Apple Highlights Mac and iPad Use in Paris Design Exhibition
Apple Highlights Mac and iPad Use in Paris Design Exhibition
1 day ago
Apple Seeks 6G Modem Engineers as It Plans for Post-5G iPhones
Apple Seeks 6G Modem Engineers as It Plans for Post-5G iPhones
1 day ago
First iPhone Duo Unboxing Video Appears Ahead of Friday Launch
First iPhone Duo Unboxing Video Appears Ahead of Friday Launch
1 day ago
Perplexity Computer Can Now Run Fully Locally on Mac
Perplexity Computer Can Now Run Fully Locally on Mac
1 day ago