In February 2025, Apple did something almost unheard of. Rather than comply with a secret United Kingdom government order to build a backdoor into its encrypted iCloud, it switched the strongest encryption off for an entire country. British users lost the ability to turn on Advanced Data Protection, Apple’s feature that end-to-end encrypts iCloud backups and files, because Apple decided that removing the protection from a whole nation was preferable to secretly weakening it for everyone on Earth.

That was not the end of it. Eighteen months later, in August 2026, Apple was still fighting, filing a second legal challenge against a revised version of the order, in a tribunal that hears these cases in secret. The dispute is not resolved as this is written, and by design, you may never see how it ends.

You do not need the verdict to learn the lesson, because the lesson is already carved in stone: data that is “encrypted” in someone else’s cloud is only as safe as that company’s ability, and willingness, to keep saying no to a government. That is a dangerously thin thing to rest your privacy on.

What actually happened

The mechanism at the center of this is a Technical Capability Notice, issued under the UK’s Investigatory Powers Act of 2016, a law critics fittingly nicknamed the snoopers’ charter. A TCN can compel a company to build the capability to bypass its own encryption. Two features of it should alarm you more than the order itself. It is secret, and it is gagged: recipients are legally forbidden from even revealing that they received one. We only know about the Apple case because it leaked.

The original 2025 notice reportedly demanded access to Advanced Data Protection data worldwide, not just for British users. Apple’s answer was to withdraw the feature in the UK rather than build the master key, and to challenge the order. Under pressure from the US government, which raised concerns about its own citizens and treaty terms, the UK reportedly pulled back the worldwide demand, and then issued a fresh notice aimed at UK residents. Apple’s first appeal was reportedly dismissed after that revision, and Apple filed again in August 2026. Through all of it, one fact has held steady for a year and a half: UK users have had measurably less privacy than everyone else, decided in rooms they cannot see.

Lesson one: a backdoor for the good guys is a backdoor for everyone

The single most important thing to understand about this fight is a principle that cryptographers, and Apple itself, have repeated to the point of exhaustion: there is no such thing as a backdoor that only authorized parties can use. A deliberate hole in encryption does not check credentials at the door. Once the mechanism exists, it becomes a target, and it will eventually be found and used by hostile intelligence services and criminals, not just the agency it was built for.

This is not a hypothetical worry. We watched it happen at national scale. The United States long ago mandated that its telecom carriers build lawful-intercept capabilities into their networks, a backdoor for the good guys. In the Salt Typhoon breach, Chinese state hackers walked straight through that very system and helped themselves to the call records and locations of a million-plus Americans. The backdoor built for authorized access became the door the adversary used. A mandated backdoor is simply a vulnerability with paperwork attached.

So when a government demands one, it is not choosing between privacy and security. It is choosing to weaken security for everyone, including itself, and calling it security.

Lesson two: your privacy shouldn’t depend on a vendor winning a fight

Give Apple genuine credit here. Faced with a choice between betraying its users and crippling its own feature, it chose the feature. Not every company would, and many would comply quietly, gagged from telling you.

But look at where that leaves you even in the good case. The best outcome a user could hope for was a large company deciding, this time, to resist, and the result was still the loss of the protection for an entire country, with the larger question dragging through secret proceedings that could go the other way at any point, silently. Your privacy became a policy decision made by lawyers and officials you will never meet, and your only role was to find out afterward, if you were lucky enough to read about it.

If your privacy depends on Big Cloud staying strong against every government, in every jurisdiction, forever, then it is already compromised. You just have not been told yet.

The distinction that matters: “won’t” is not “can’t”

Here is the subtlety that trips people up. Apple truthfully says it has never built a backdoor or master key and never will. That is a real and admirable statement, but it is a statement about product design, not a guarantee that your UK iCloud data is encrypted. With Advanced Data Protection unavailable, the affected data falls back to standard protection, where Apple holds the keys. Apple can read it, which means Apple can be compelled to hand it over. No backdoor required, because the front door was never locked to begin with.

That is the whole game. “The provider promises to protect your data” and “the provider cannot read your data even if ordered to” are completely different guarantees. Only the second one survives a court order, a change of ownership, or a change of heart. A promise is a policy. Math is not.

What actually survives a backdoor order

The only privacy that holds up when a government comes knocking is privacy the provider is incapable of undoing. That takes one of a few forms. End-to-end encryption where the provider genuinely holds no keys, so there is nothing to hand over. Services designed with no logs and no identifiers, so there is nothing meaningful to compel. And self-hosted infrastructure, where there is no third party to serve the order to in the first place.

This is the logic behind building things to be trustless by design. The point is not that you have found a provider virtuous enough to resist every government. The point is to arrange things so there is nothing to resist with, so that compliance with a backdoor order is not refused but impossible. A no-identifier messenger cannot produce a social graph it never had. A relay that holds no readable data cannot be forced to decrypt it. A server you run yourself receives no secret notice at all.

There is also one concrete move you can make today, court cases aside. Even a perfectly end-to-end encrypted messenger loses its protection if your phone quietly backs up its message history to a cloud the provider can read. Turning off cloud backup of your messages is the difference between your conversation history being reachable through your vendor and not being reachable at all, and that switch is in your hands right now, regardless of how any tribunal rules.

Why we build the way we do

This entire episode is the argument for our approach, made for us by events. We do not route your life through a vendor cloud that a government can quietly compel. We ship end-to-end encrypted, no-identifier communications where there is nothing to hand over, and we make self-hosting the pieces that matter practical, so your privacy does not hinge on a distant company prevailing in a secret courtroom. Your keys, your data, on a device whose private-by-default state is a matter of architecture rather than of someone else’s ongoing willingness to fight for you.

The backdoor you should worry about is not the criminal’s. It is the one a government can lawfully order into existence, in secret, with a gag attached, into the cloud where you parked your entire life. The Apple case will end somewhere, someday, quietly. The lesson is already permanent: if a government can order a door opened, that door exists, and the only real protection is to keep your data somewhere no such order can reach. Build on something they cannot order open.

If you want a phone and a setup where your privacy is not one secret court ruling away from disappearing, that is what we build. Email hello@spicycorp.com, or book a call.