Apple’s “Hide My Email” is leaking real addresses. Since Apple hasn’t fixed the flaw after a year, treat the feature as totally broken and unsafe.
Apple sold “Hide My Email” as a digital vault. It promised total anonymity; instead, it delivers a leaky bucket. A critical vulnerability allows anyone to trace your random alias back to your personal email address in minutes.
The most damning detail? Apple knew. Security researcher Tyler Murphy reported this flaw to Cupertino in June 2025. And the company still refuses to fix the core exploit over a year later. Apple even falsely claimed a resolution in March 2026- yet the hole remains wide open, exposing millions of users.
This bug flips the script on privacy. Attackers use this flaw to link your aliases to your real-world identity, making anonymous signups easily searchable across databases. So, if you used these aliases to dodge spam or protect your personal info? You made yourself a bigger target for data brokers.
Apple’s ongoing silence suggests they treat user privacy as a background ticket in an endless, low-priority queue. They prioritize aggressive product expansion over the integrity of the security features they already market as “pro-privacy.”
For now, stop trusting the feature. If you require genuine anonymity, switch to dedicated, battle-tested services like Proton’s SimpleLogin or DuckDuckGo’s Email Protection. Apple’s privacy marketing now looks like a hollow shell against the reality of its crumbling infrastructure. Treat every hidden email address as if it were public today. Because in the current environment? It effectively is.
Does this breach of trust change how we perceive BigTech’s privacy-first marketing, or do you see this as an inevitable consequence of managing complex infrastructure?
