Apple fixes a bug that stored notifications for deleted messages on iPhone and iPad, following a report that police used it to extract deleted Signal messages

Apple released a software update on Wednesday for iPhones and iPads fixing a bug that allowed law enforcement to extract messages …

TechCrunch 2026-04-23 Lorenzo Franceschi-Bicchierai

Context & Ripple Effects

Related coverage shows a recurring Apple pattern: privacy-sensitive data can escape an app’s intended protections through operating-system features, from hidden lock-screen notifications to unencrypted Mail snippets.

This case matters because the reported exposure concerns remnants of deleted Signal communications and an asserted law-enforcement use case, putting the focus on device-level data handling rather than Signal’s messaging controls alone.

First-order effects

Apple’s update removes the reported notification-storage path on iPhones and iPads, reducing the availability of those deleted-message remnants on updated devices.
Signal users affected by the bug gain a narrower gap between deleting a message in the app and eliminating associated notification data; police relying on that extraction route lose it on patched devices.

Second-order effects

Mobile-forensics workflows must account for OS-version and patch status more closely, since an artifact available on unpatched devices may no longer be recoverable after the update.
The incident reinforces that encrypted-messaging providers’ privacy guarantees can be weakened by platform notification and storage behavior outside the provider’s direct control.

Third-order effects

If similar disclosures continue, privacy assessments will increasingly treat notification metadata, previews, and other system-generated artifacts as part of the effective attack surface—not merely the contents protected inside an app.
The pattern also strengthens the security-to-policy pipeline: evidence that device artifacts can yield sensitive communications can shape scrutiny of both platform data-retention practices and forensic access claims.

The trend: Encrypted communications are increasingly judged by the privacy of the entire device stack, as operating-system artifacts can determine whether deleted or protected app data remains accessible.

Discussion

@philipmai.com Philip Mai on bluesky
“Apple released a software update on Wednesday for iPhones and iPads fixing a bug that allowed law enforcement to extract messages that had been deleted or disappeared automatically from messaging apps.” techcrunch.com/2026/04/22/a...
@vcsjones.dev Kevin Jones on bluesky
Nice of Apple to jump on fixing the notification DB data retention issue. www.macrumors.com/2026/04/22/ i...
@lorenzofb Lorenzo Franceschi-Bicchierai on bluesky
NEW: Apple fixed the bug that law enforcement, like the FBI, were taking advantage of to extract chat messages that had been deleted or disappeared automatically. — Until now the iPhone stored deleted or disappered messages in a database, allowing authorities to access them wit…
@amyhoy Amy Hoy on bluesky
apple has tons of problems but they're also the only major tech company that does literally anything for privacy
@activistchecklist.org @activistchecklist.org on bluesky
Great news. A couple of weeks ago we learned that the FBI used the iPhone notifications database to harvest Signal messages after they had been deleted. — They just fixed that bug! ✅ — Upgrade to the latest iOS version now: 26.4.2 (Settings > General > Software Update) — …
r/Denmark r on reddit
Vi kunne jo godt have pillet de der mink-"sms"er ud (som jo var iMessages)
r/iphone r on reddit
iOS 26.4.2 released
r/privacy r on reddit
Apple fixes bug that let the FBI recover deleted Signal messages
r/cybersecurity r on reddit
Apple fixes bug that let the FBI recover deleted Signal messages
r/technology r on reddit
Apple fixes bug that let the FBI recover deleted Signal messages
Mattia Epifani Mattia Epifani on linkedin
Interesting that Apple decided to “fix” this only after a news article. — This has been well known among forensics experts for years. …

Chronicles