logoalt Hacker News

Huppielast Tuesday at 7:46 AM1 replyview on HN

Maybe you missed the 'or sent to private cloud' part of the announcement, it's not just local-llm only.

Don't get me wrong, just like you I personally would also prefer LLM-integrations with a privacy-focused provider and I think Apple is a good party to get that from (assuming they're using good models and keep their privacy guarantees here...)

But in the end you're still often 'sending data to an LLM provider', and the EU enforcing them to also let that be competing LLM providers still doesn't sound like a bad thing to me.

If Mistral would give the same privacy guarantees: great! If a company wants to use their enterprise OpenAI subscription: great! Etc. etc.

Let's allow for some competition here and not force a specific LLM-provider onto users just because they like the Apple hardware and software ecosystem.


Replies

e28etalast Tuesday at 1:54 PM

> Maybe you missed the 'or sent to private cloud' part of the announcement, it's not just local-llm only.

I saw that. Maybe you’re unfamiliar with Apple’s Private Compute Cloud? It’s intended to allow cloud computation on data without making the data available to anyone, which I think backs up my interpretation that apple’s stance is “no one should have this data, not even us”

This is from https://security.apple.com/documentation/private-cloud-compu...

We designed Private Cloud Compute with core requirements that go beyond traditional models of cloud AI security:

* Stateless computation on personal user data: PCC must use the personal user data that it receives exclusively for the purpose of fulfilling the user’s request. User data must not be accessible after the response is returned to the user.

* Enforceable guarantees: It must be possible to constrain and analyze all the components that critically contribute to the guarantees of the overall PCC system.

* No privileged runtime access: PCC must not contain privileged interfaces that might enable Apple site reliability staff to bypass PCC privacy guarantees.

* Non-targetability: An attacker should not be able to attempt to compromise personal data that belongs to specific, targeted PCC users without attempting a broad compromise of the entire PCC system.

* Verifiable transparency: Security researchers need to be able to verify, with a high degree of confidence, that our privacy and security guarantees for PCC match our public promises.

- - - -

Second, according to their press release ([1] and a sibling comment elsewhere in this chain), they’ve been trying to find a way to allow interoperability without giving full access to everything. Unsuccessfully, so far. So it’ll be interesting to see where it goes, but I’m sympathetic to their current stance.

[1] https://www.apple.com/newsroom/2026/06/due-to-dma-siri-ai-de...