The news
Apple is facing a proposed class action lawsuit that accuses the company of fraud and false advertising in the marketing of iCloud Private Relay. The suit claims Apple sold iCloud+ subscriptions while knowing that the feature often failed to hide users’ IP addresses as advertised.
Context
Security researchers disclosed the flaw last week. Private Relay is meant to mask a subscriber’s IP address and DNS records during Safari browsing. Instead of routing traffic through a single server, the service splits requests across two relays to prevent any single party from seeing both the user’s identity and the destination site. The lawsuit alleges this protection broke down in practice, exposing the very information Apple said it would conceal.
The same law firm previously secured a $250 million settlement from Apple in a Siri-related case that concluded in December 2025. That resolution’s payout terms stayed undisclosed until May. The new complaint draws a direct line between the earlier Siri litigation and the current Private Relay claims, arguing that Apple’s pattern of privacy marketing has again outrun the delivered product.
Detail
The complaint was filed by the Clarkson Law Firm on behalf of iCloud+ subscribers. It states that Apple knew or should have known its privacy claims were false or misleading at the time it promoted the service. Clarkson partner Tim Giordano noted that Apple built its brand on privacy promises yet continued to sell the feature despite the underlying defect.
Private Relay remains available only to paid iCloud+ subscribers and is presented as a core privacy benefit of the tier. The sources confirm that the vulnerability surfaced in recent researcher reports and directly contradicted Apple’s marketing language around the feature. They do not detail the exact technical conditions that triggered the IP leaks.
The suit references the earlier Siri litigation, where the firm obtained a $250 million resolution. No specific damages figure is attached to the new filing, which remains at the proposed class stage. The complaint centers on the gap between Apple’s statements that Private Relay would shield IP addresses and DNS records and the reported instances where that shielding did not occur.
Why it matters
Subscribers who paid for iCloud+ expecting reliable IP masking now have a documented basis to question whether the service delivered what was promised. The suit places Apple’s privacy marketing under direct legal scrutiny at a time when competitors offer similar relay or VPN-style tools without comparable class-action exposure. If the case proceeds, it will test how courts weigh engineering shortfalls against advertising language in paid privacy services.
For users, the immediate question is whether Apple will adjust Private Relay’s design or its claims before another round of litigation arrives. The Clarkson Law Firm’s track record with the Siri settlement shows that these filings can produce substantial resolutions even when the underlying technical issues receive limited public explanation. Apple’s broader reputation for privacy rests on features like this one; any sustained legal challenge risks eroding the marketing advantage the company has cultivated.
---
Sources:
No comments yet