← IoT Privacy Database

Apple AirTag

Apple Inc. · Location / People Tracker

Staff Reviewed — a person at DeSpy reviewed this rating.

2.1Surveillance
Index
Policy — what its policy permitsB
Evidence — what research provesC

AirTag is a coin-sized Bluetooth tag located by piggybacking on the hundreds of millions of iPhones in Apple's Find My network. Location reports are end-to-end encrypted with rotating identifiers, so Apple itself cannot see where a tag is and does not monetize the data, but the same tag is a documented stalking vector when secretly planted on a person or in a car.

Why this rating

Strong policy posture: end-to-end encryption and rotating IDs mean Apple never sees tag locations and does not sell them (local-processing/on-device +7), with only modest deductions for handling precise-location infrastructure (-15) and binding arbitration (-5). Evidence reflects a well-documented, ongoing stalking-harm pattern: a class action alleging Apple failed to design adequate anti-stalking safeguards - Apple's motion to dismiss was denied in March 2024, letting negligence and strict-liability claims proceed - and, after class certification was denied, dozens of individual suits continued. No data sale, breach, or regulatory action is documented against the product itself.

What it is

Manufacturer
Apple Inc.
Category
Location / People Tracker
Model years
2021-present
Market status
Current
Companion app
Find My

The evidence 2

Independent research, regulatory action, lawsuits and journalism about how this device handles personal data — the "what actually happens" axis. Each links to its source.

  1. S4Apple Faces Dozens of Lawsuits Over AirTag Stalking After Class Action Denied
    Journalism · MacRumors · 2026-05

    Reports that after the class action was denied, dozens of individual AirTag-stalking suits proceeded against Apple.

    Why it matters here: Shows the stalking-vector harm is ongoing and widespread for this exact device.

  2. S4AirTags stalking lawsuit alleges Apple's negligence in protecting victims
    Lawsuit · Malwarebytes · 2024-01

    Covers the class action by stalking victims alleging Apple was negligent in AirTag's anti-stalking design; the suit was later allowed to proceed past a motion to dismiss.

    Why it matters here: Documents this device being used as a stalking tool and the resulting product-liability claims.

Are you the maker? Respond to this finding

Free. There is no paid or faster path, and nothing about a rating is for sale. Prove you control your company's domain with one DNS record; a person then reads your statement beside our finding and decides whether to publish it.

An email is encrypted at rest and opened only to answer you; it is erased 30 days after we resolve this (or 180 days if still open), and you can erase it sooner. Unproven filings are deleted after 14 days.

Think something here is wrong?

Evidence and research improve when people push back. Tell us what to re-check — a misattributed domain, an outdated classification, a claim about your own app — and a human will review it. Responses can take up to 30 days.

If you leave an email it is encrypted at rest and opened only to answer you — never shared, never used for anything else. It is erased 30 days after we resolve this (or 180 days if it is still open) without you asking, and you can erase it sooner at any time; either way your correction stays, anonymously. Leave it blank and your request is fully anonymous from the start (we store no IP address either way).

Descriptive, cited, not legal advice; ratings are versioned and corrections create a new version. Data from the IoT Info Grabber DB research project, CC BY-SA 4.0.

← Back to the IoT Privacy Database