Skip to main content

Apple’s iCloud partner in China will store user data on servers of state-run telecom

Apple’s iCloud partner in China will store user data on servers of state-run telecom

/

GCBD is contracting out some data storage needs to China Telecom

Share this story

Illustration by Alex Castro / The Verge

Apple’s Chinese iCloud partner, Guizhou-Cloud Big Data (GCBD), has cut a deal with the state-run China Telecom to move user data to the latter’s servers, according to a public-facing WeChat post from China Telecom. Though the iCloud data is end-to-end encrypted, the encryption keys are also stored in China, raising the possibility the Chinese government could gain access to it. Yet Apple has said in the past that only its employees have access to the keys, and the company has proven, with its clash with the FBI and other agencies, that it will fight to keep encrypted data protected.

Still, the decision reasonably has some critics of the company’s business strategy in the country concerned. Apple has largely met the demands of the Chinese government in order to sell its products overseas and maintain its business relationships with local suppliers. That said, GCBD is supervised by a board of government-run businesses, and it had clear ties to the state before, during, and after its initial deal with Apple. So many of the same concerns critics had with the GCBD deal remain and not much is really changing here. Although it is understandable that a company like China Telecom would heighten concerns that the Chinese government may try to gain access to iCloud data like iMessage texts and emails.

Apple originally announced its move to migrate iCloud user data to local servers run by Chinese companies back in January. Apple users in China can delete their accounts if they so choose or opt out by selecting a different country as the host location for their cloud data. But it’s not clear how easy or safe that is as a retroactive strategy. In other words, Apple users in China may have to create new accounts and choose to have the data hosted on servers in another country if they’re concerned about maintaining absolute security of their personal information.