Apple’s email privacy tool faces scrutiny over domain shift

Apple's upcoming change to its Hide My Email service is being met with concern from both the privacy and developer communities, after confirmation that new email addresses generated through Apple's privacy features will be sent from just one domain: private.icloud.com.

The update will impact two features that aid users in keeping their real email addresses hidden when signing up to an online service or subscribing to an online service; the Hide My Email service and Sign in with Apple feature.

All existing email aliases will continue to work and Apple claims users will need to take no action once the migration is implemented.

New Domain, New Questions

The main component of this change is related to the way the relay emails are created by Apple. The current service uses various domains for the email aliases under the various privacy features and apps, but in future all created aliases will be created from private.icloud.com.

Despite no indication of any operational changes being introduced alongside the change of domain, several privacy researchers and developers have raised questions about how the new single, identifiable domain will make it easier for certain web-pages and apps to block these aliases and so it appears they will face further restrictions.

Some believe that web-pages or apps attempting to prevent the use of temporary or masked email accounts will now more easily identify any created aliases.

Apple's developer documentation clearly states that business's, web-pages and apps must update their email validation system and whitelists to recognise the new domain.

The Growing importance of Email privacy this comes at a time when businesses are being scrutinised more and more over data collection, usage and storage.

Masking emails is one way users are attempting to avoid receiving junk mail, reducing tracking and also keeping their personal details from being disseminated too widely.

This trend has now spread to all major territories including Australia, United Kingdom, Canada and the USA, which all continue to develop new privacy laws and improve public awareness of how personal data is managed and by which company. Major tech providers such as DuckDuckGo, SimpleLogin, and Mozilla already offer such services.

Apple's Growing Services Business

Hide My Email is part of the iCloud+, which makes up a segment of Apple's services business, a market that brought in approx $391 billion in 2025 and continues to rise in value and importance to the tech giant.

No pricing information, accessibility issues or functional changes have been outlined by Apple in light of this development and it continues to maintain that the sole purpose of the domain migration is to consolidate the different privacy domains into one, single alias domain.

Source: TechCrunch

Follow Inspirepreneur Magazine for daily global business news.