Apple will scan public iCloud links for harmful content

If you share an iCloud photo album or file with “Anyone with the link,” Apple says it will start checking that public link for harmful content in upcoming OS releases.

Why would Apple scan an iCloud link at all?

A fair question is: if a file is in my iCloud, why is Apple checking it?

The short answer is that this is about public sharing, not your whole private storage.

Apple says the change starts with iOS 27.3, iPadOS 27.3, macOS 27.3, and visionOS 27.3. It applies when you share iCloud content by link and set it to “Anyone with the link.” That covers things like photos in iCloud Photos and files in iCloud Drive.

That setting turns a private item into something much closer to a public webpage. It is still your file, but access is no longer limited to named people you picked one by one.

That distinction matters.

A simple way to think about it: there is a difference between keeping papers in a locked drawer and putting copies on a table outside your front door with a note that says, “Anyone who has this address can take a look.” The second case is still controlled in some sense, but it is no longer private in the same way.

Public link sharing changes the privacy math

Apple says it plans to check those public iCloud links for harmful content. Based on the details available, this is tied specifically to the public-link sharing option, not to all photos and files in iCloud.

That is the notable part for me. The company is drawing a line around how content is exposed, not just where it is stored.

For regular users, that means the privacy expectation should be different depending on how you share:

• Private storage in your account is one thing
• Sharing directly with specific people is another
• Making something reachable by “Anyone with the link” is closer to publishing

Plenty of people treat unguessable links as if they were private. Sometimes they are private enough for day-to-day use. But they are not the same as end-to-end encrypted messaging between known participants, and they are not the same as a file that never leaves your own account.

That gap confuses people all the time.

The phrase “harmful content” also deserves a careful read. Apple has said it will check publicly shared links for it, but the exact categories, detection methods, and enforcement details are not included in the facts here. So it is better not to assume more than that.

What this probably means in practice

If you use iCloud link sharing casually, the main effect is simple: the moment you choose “Anyone with the link,” you should treat that item as entering a more moderated space.

That does not automatically mean a human is paging through your vacation photos. It means the shared content may be checked under Apple’s rules for harmful material when you make it publicly accessible by link.

Those are different things.

The practical privacy lesson is bigger than Apple. Cloud services often have different rules for:

• private storage
• person-to-person sharing
• public or semi-public link sharing

People tend to focus on where the file lives and forget to focus on the access model. But from a security and trust point of view, the access model is often the real story.

If a link can be passed around freely, copied into chats, forwarded in email, or posted somewhere else, then the service has a stronger reason to treat it like published content rather than like a sealed envelope.

What I’d do before sharing by link

If you use iCloud for photos and documents, this is mostly a prompt to be more deliberate.

A few practical steps help:

• Before sharing, check whether you really need “Anyone with the link” or whether sharing with specific people is enough
• Avoid using public-style links for sensitive personal documents, IDs, financial records, or anything you would hate to see forwarded
• Review old shared links and remove ones you no longer need
• Separate convenience from privacy in your own head; easy sharing usually means less control
• If you are sharing for work, school, or a group, assume links can spread beyond the original audience

Public sharing is convenient because it removes friction. That same feature removes some privacy too.

My read is that Apple is making explicit something many users do not think about: once you publish access to cloud content through an open link, that content stops being purely a private-storage matter and starts being a trust-and-safety matter as well.

If you remember one thing, make it this: “Anyone with the link” is not the same as “only the people I meant.”