US Senator Warns Foreign Governments Are Spying on Apple, Google Phone Users via Push Notifications

US Senator Ron Wyden has raised concerns about smartphone users being spied on by foreign governments through their push notifications by compelling Apple and Google to turn over these records.

In a letter addressed to Attorney General Merrick Garland on Wednesday, Wyden emphasized the need for transparency regarding demands for smartphone push notification records.

Push Notifications From Google and Apple

The Oregon Democrat disclosed that his office has been investigating a tip received last year, which suggested that government agencies from foreign countries were demanding "push" notification records from both Google and Apple.

According to TechCrunch, Wyden pointed out that governments can "secretly" compel Apple and Google to share push notification records, similar to other user information. However, he highlighted a restriction in the US, stating that information about push notification records cannot be publicly disclosed.

Push notifications are instant alerts delivered to smartphone users by various apps, and they are routed through a digital post office managed by the phone's operating system provider. For iPhones, this service is Apple's Push Notification Service, while Android phones use Google's Firebase Cloud Messaging.

According to Wyden, the interception of push notifications by Apple and Google during the transmission process places them in a unique position, making them susceptible to government demands for surveillance.

App developers are limited in their choices, as they must use the services provided by Apple or Google to ensure reliable delivery of push notifications on their platforms.

The data collected by Apple and Google includes metadata from push notifications, which specify the app that received a notification, when it was received, and the phone and Apple or Google account to which the notification was delivered.

In some cases, unencrypted content may also be received, ranging from backend directives for the app to the actual text shown in a user's notification.

Apple and Google Transparency

Wyden asserted that Apple and Google should have the transparency to disclose legal demands they receive, especially from foreign governments.

The senator advocated for the tech companies to reveal whether they have been compelled to facilitate surveillance practices and publish aggregate statistics on the number, among other things.

"Apple and Google should be permitted to be transparent about the legal demands they receive, particularly from foreign governments, just as the companies regularly notify users about other types of government demands for data," Wyden said in the letter.

"These companies should be permitted to generally reveal whether they have been compelled to facilitate this surveillance practice, to publish aggregate statistics about the number of demands they receive, and unless temporarily gagged by a court, to notify specific customers about demands for their data. I would ask that the DOJ repeal or modify any policies that impede this transparency," he added.