Apple Blocks iCloud Private Relay in 10 Countries Over Regulatory Concerns

No single entity could connect a user's identity to the websites they visit.
Apple's two-server design for Private Relay was meant to prevent surveillance, even by Apple itself.
Mark

Why would a government care about a privacy tool that hides what websites you're visiting? Doesn't that seem like something they'd want to block?

Mimi

Exactly. Governments that want to monitor their citizens' online activity see encryption and anonymity as threats. If they can't see what you're doing, they can't control the narrative or catch dissent early.

Luke

But Apple didn't say that. Apple just said "regulatory reasons." We don't actually know what those reasons are or how much pressure came from which governments.

Mark

So we're guessing at the motive?

Mimi

Not guessing—inferring from context. These ten countries have documented records of internet censorship and surveillance. It's not random that Private Relay is blocked there.

Luke

True, but that's pattern-matching, not reporting. The story would be stronger if we knew what a Chinese regulator actually told Apple, or what a Saudi official demanded. We don't have that.

Mark

Does it matter that Apple didn't mention the restrictions when announcing the feature?

Mimi

It matters a lot. Users in those countries would buy iCloud+ thinking they were getting Private Relay, then find out they couldn't use it. That's a material omission.

Luke

Although to be fair, most users outside those countries probably didn't even know Private Relay existed until after the announcement. The real question is whether Apple actively hid the restriction or just didn't think to mention it.

Mark

And we don't know that either?

Luke

No. We know Apple told Reuters about it. We don't know when Apple decided to block it, or whether the decision came before or after the public announcement.

  • Apple's most ambitious privacy feature — one that even blinds Apple to its own users' behavior — was blocked in ten countries before most people knew it existed.
  • The exclusions were disclosed not by Apple, but through a Reuters report, leaving users in affected countries to discover the gap only after paying for an upgrade.
  • Governments in countries like China and Turkmenistan have long demanded visibility into citizen internet activity, and Private Relay's two-server anonymization design strikes directly at that control.
  • Apple offered no specific legal or regulatory explanation, leaving a silence that speaks louder than any press release about where the company's privacy principles end.
  • For users outside the ten restricted countries, the feature arrives quietly bundled into existing iCloud storage plans starting at just $0.99 a month — privacy as a modest subscription, not a luxury.

In the spring of 2021, Apple introduced a privacy tool called iCloud Private Relay — designed to shield users' web activity from everyone, including Apple itself — only to quietly exclude ten nations from its reach. Countries like China, Saudi Arabia, and Belarus were named without explanation, their absence from the feature a testament to the enduring friction between technological idealism and political authority. The architecture of privacy, it turns out, is still subject to the architecture of power.

When Apple unveiled iCloud+ alongside iOS 15 in 2021, it introduced iCloud Private Relay as a centerpiece privacy feature — a system designed to encrypt all outgoing web traffic so thoroughly that not even Apple could identify what a user was doing online. The tool works in two deliberate steps: Apple's servers strip away a user's identifying IP address, then pass the traffic to a third-party server that assigns a temporary one before sending it to its destination. No single party ever holds the full picture.

But a disclosure to Reuters revealed a significant gap in that vision. Ten countries — including China, Belarus, Saudi Arabia, Egypt, and Kazakhstan — would not have access to the feature at all. Apple cited regulatory obstacles without naming specific laws or pressures, leaving the reasoning opaque.

The omission was telling in another way: Apple had not mentioned the country restrictions during its original iCloud+ announcement. Users in affected regions would only learn of the limitation after attempting to enable a service they had already paid for.

For everyone else, Private Relay arrived as part of any paid iCloud storage plan, beginning at $0.99 per month, alongside two companion features: Hide My Email and custom iCloud Mail domains. The quiet geography of its absence, however, illustrated something Apple rarely states plainly — that its privacy commitments, however sincere, have always been negotiated against the demands of governments unwilling to let that privacy stand.

When Apple unveiled iOS 15 in the spring of 2021, the company introduced iCloud+, a paid tier of its cloud storage service bundled with new privacy-focused features. One of them was iCloud Private Relay, a tool designed to encrypt all web traffic leaving a user's device so that no one—not hackers, not internet service providers, not even Apple itself—could intercept or read what you were doing online.

But when Apple spoke to Reuters about the feature's rollout, the company revealed a significant caveat: Private Relay would not be available in ten countries. China, Belarus, Colombia, Egypt, Kazakhstan, Saudi Arabia, South Africa, Turkmenistan, Uganda, and the Philippines would all be excluded from the service. Apple attributed the decision to regulatory obstacles in those nations, though the company did not elaborate on what specific laws or pressures had prompted the restriction.

The technical architecture of Private Relay explains why some governments might view it with suspicion. The system works in two stages. First, web traffic from a user's device travels to a server maintained by Apple, which strips away the user's IP address—the numerical identifier that reveals location and identity. Once that information is removed, Apple forwards the traffic to a second server run by a third-party company, which assigns a temporary IP address and sends the request onward to its final destination. This two-server design is deliberate: by involving an outside party, Apple ensures that no single entity, including Apple itself, can connect a user's identity to the websites they visit.

For users in countries where Private Relay would be available, the feature came as part of any paid iCloud storage plan, with no price increase. The cheapest tier remained $0.99 per month. iCloud+ also bundled two other privacy tools: Hide My Email, which generates unique, disposable email addresses that forward to a user's actual inbox, and the ability to customize iCloud Mail addresses with a personal domain name.

Apple had not announced the country restrictions when it first presented iCloud+ to the public, making the Reuters disclosure the first public acknowledgment that the feature would have geographical limits. The company's silence on the matter during its initial announcement meant that users in the restricted countries would discover the unavailability only after upgrading or attempting to enable the service. For Apple, the decision represented a familiar tension: the company's privacy commitments sometimes collide with the regulatory demands of authoritarian and semi-authoritarian governments, and in those moments, Apple has historically chosen to comply rather than resist.

Apple said regulatory reasons are preventing the Private Relay feature from launching in those countries.
— Apple, via Reuters
Quieres la nota completa? Lee el original en MacRumors ↗
Contáctanos FAQ