Apple Notes

Apple Inc. is headquartered in Cupertino, California, and subject to US law, including the CLOUD Act and FISA Section 702. For EU/EEA, UK, and Swiss users, personal data is controlled by Apple Distribution International Limited in Ireland. However, the parent company and much of the backend infrastructure remain under US jurisdiction. Apple also uses third-party data centres globally. The February 2025 UK case (see 1.2) shows that jurisdiction has practical consequences for the protections available to users.

With Advanced Data Protection (ADP) enabled, Notes join about 25 iCloud data categories protected by end-to-end encryption. Apple loses the technical ability to read them. By default, Apple retains the keys and can access content. ADP remains off by default in 2026. Since 21 February 2025, Apple has been unable to offer ADP to new UK users due to the UK government's demand for backdoor access under the Investigatory Powers Act. Litigation (Privacy International, Liberty) was still ongoing in 2026, following a narrower order issued in September 2025 targeting only British citizens' data. E2EE being 'available' does not mean it is available to every user worldwide.

Apple does not sell user data or monetize Notes content through advertising. The only relevant data-sharing channel, the ChatGPT extension inside Apple Intelligence, sends text only on explicit, per-request user action. Apple obscures the request's IP address, and without a linked OpenAI account, requests are not stored or used for training. This is opt-in sharing under user control, not automatic collection.

Most Apple Intelligence processing happens on-device. More complex requests use Private Cloud Compute (PCC), which Apple says does not retain data after processing and offers cryptographic verification through a public transparency log. No Notes content is used to train Apple's models without consent. The exception is the optional ChatGPT integration: if the user links an OpenAI account and enables it, OpenAI may use those requests for training, but this requires explicit activation and is flagged before each share.

Apple Notes and the underlying iCloud infrastructure are entirely proprietary. No component of the core product is open source.

Apple holds ISO/IEC 27001 and ISO/IEC 27018 certifications for its internet services, including iCloud, re-audited annually by an accredited certification body (Coalfire) with publicly verifiable certificates. Since 2024, Apple has also opened a Virtual Research Environment (VRE) letting external researchers inspect Private Cloud Compute, including a cryptographic transparency log and a dedicated bug bounty. Neither, however, amounts to an independent technical audit published specifically about the Notes/iCloud encryption architecture in the way Proton or Signal publish audits by named firms like Cure53 or NCC Group: ISO certification audits process, not a penetration test with public findings, and PCC's scope covers Apple Intelligence's cloud compute, not standard Notes sync. That combination is worth partial credit, not zero and not full marks.

As closed-source software with no contributor community, there is no documented governance model, contribution process, or code of conduct.

Apple Notes has no price of its own: it ships free and pre-installed on every Apple device, with no in-app purchase, subscription, or advertising.

Every feature inside the Notes app is free. But iCloud sync shares a 5GB free storage tier across Notes, Photos, Backup, and iCloud Drive, unchanged since 2011 and widely criticized as too small (Google offers 15GB free via Drive/Keep). Users with many attachments, scans, or photos in their notes quickly hit this limit, pushing them toward a paid iCloud+ plan just to keep syncing.

There is nothing to hide in the Notes app itself since it has no price. The associated iCloud+ storage plans (needed only beyond the 5GB free tier) are clearly published with no hidden fees.

Apple Notes itself has no price, so the strict N/A condition ("the product has no price at all") does not cleanly apply given the app is inseparable from paid iCloud+ storage in practice. iCloud+ pricing does vary substantially by country — roughly $0.37/month in Brazil versus $1.33/month in the UK, with steep discounts in India, Turkey, and Pakistan — suggesting some accommodation of local purchasing power. But Apple does not publish a documented purchasing-power-parity policy, and it raised iCloud prices in 2025–2026 in markets including Brazil, Chile, and Peru by as much as 34%, which cuts against a coherent affordability policy. That places this in the middle bracket rather than N/A or full marks.

There is still no native bulk-export tool in 2026. Users can export individual notes as PDF or plain text, but no built-in option exists to export the entire note library at once in a structured, open format (JSON/Markdown). Third-party open-source tools like Apple Notes Exporter fill this gap, but Apple does not provide one.

No self-hosting option exists. Sync depends entirely on Apple-operated iCloud infrastructure.

Notes are cached locally and remain accessible offline in the native apps (iOS/iPadOS/macOS), syncing automatically once connectivity returns.

Apple Notes is available only on Apple hardware: iOS, iPadOS, macOS, watchOS, and visionOS. A web interface at iCloud.com/notes allows access from any browser on Windows, Android, or Linux. The web version does not support offline access or editing locked notes. Apple Notes requires an Apple ID and does not offer native support for Linux, *BSD, or F-Droid. It qualifies as more than single-platform but does not meet open platform criteria.

Apple documents a system-wide accessibility commitment (VoiceOver, Dynamic Type, Voice Control) that extends to Notes via OS inheritance, but there is no WCAG conformance statement or accessibility documentation specific to the Notes app itself.

Apple Inc. is one of the largest companies in the world by market capitalization, with full vertical control over hardware, software, and services — squarely Big Tech by any definition.

Apple remains an independent public company with no acquisitions or ownership restructuring in the review period.

Apple has genuine public privacy commitments — App Tracking Transparency and rules restricting apps from sharing personal data with third-party AI without disclosure since November 2025 — but also a documented record of regulatory sanction. France's Autorité de la concurrence fined Apple €150 million in March 2025 for designing ATT's consent flow in a way that disadvantaged third-party publishers relative to Apple's own advertising, and Germany's Bundeskartellamt raised similar concerns in February 2025. Apple also complies with government data requests under applicable law, including in the US. The record is mixed: real privacy commitments alongside documented anticompetitive conduct found by regulators.

Apple publishes an annual environmental progress report (the 2025 edition released in April 2026) with third-party-reviewed metrics: a 60%+ reduction in global greenhouse gas emissions versus 2015, a public 'Apple 2030' carbon-neutrality target for its full footprint, 30% recycled materials across 2025 products, and over 20GW of supplier renewable energy under contract. This meets the bar for a clear, documented sustainability commitment with public reporting, warranting full credit on this question.

Apple Notes launched with iOS 7 in 2013: 13 years of continuous maintenance as of 2026.

There is no contributor community or public roadmap, since this is closed, proprietary software. But the app receives substantial, regular updates every annual iOS/macOS cycle — shared folders and PDF collaboration, tags and smart folders, Math Notes, custom fonts, and Apple Intelligence integration were all added across the 2023–2025 cycles. 'Low activity / abandoned' would misrepresent this; 'maintained but quiet' better reflects active vendor development with zero public community participation.