Replying to 516add19...

Im probably paranoid but I want to hear more refuting tje potential for Apple to link your npub to your Apple ID. I dont claim it does but i worry it may? Could Apple link purchased sats through Primal to the npub profile wallet they are being delivered to? I dont know the technicals how this would work. I just want to protect privacy.
72
nobody 2y ago

I was just going through the code looking at this. I don’t see why your npub would be disclosed to Apple from what I’m seeing.

But, it might reveal your information to Primal and/or Strike.

“Paying with Apple Pay

Information Shared When You Make a Payment

When you begin a payment within an app, on the web, or within Apple Messages for Business using Apple Pay, to enable tax and shipping cost calculation your zip code, postal code, or other equivalent information is provided to the app, website, or merchant. After you authorize the payment, other information requested by the merchant, such as a device- or merchant-specific account number, your shipping address, or email address, is also provided. The card number from your credit, debit, or prepaid card is not provided when you use Apple Pay.”

https://www.apple.com/legal/privacy/data/en/apple-pay/

Reply to this note

Please Login to reply.

Discussion

51
516add19... 2y ago

Wow thank you so much for checking into that! My next question would be then if Primal has the potential to gather this information on users. It seems it can gather a lot of info if you use Apple Pay to purchase sats through Primal. I assume this can be avoided by not purchasing any in app purchases through Apple Pay.

I do wonder when people claim when opening a Primal wallet you can provide a fake name and email, do they understand Primal gets the info you mentioned above.

72
nobody 2y ago

They probably don’t. The fake email may be the one that strike gets, but primal (likely) would possibly have access to the email, etc that was linked to your payment method.

Worth noting that Primal claims to not be gathering any other user metrics (in App Store version) which I don’t doubt at all, but using the Apple Pay feature (which is conducted by Apple and not Primal) may cause data to come into their possession.

Primal may wish to have their lawyers look at their Privacy Policy at https://primal.net/terms as well, as it does not account for information that may be collected or revealed to Primal by Apple Pay. IANAL, but offering friendly feedback.

But on a cursory look through the iOS codebase, I haven’t seen anything concerning or intentional looking. A swift/iOS expert should feel free to correct me, but I’ve been looking at code for a lot of years, and this is my read of it.

7e
nobody 2y ago

You got A’s in school. Nice note.