App Privacy Report for 1P only displays one contacted domain

Damnatus

Thanks for the reply. I've spoken to one of our developers and they confirm that, because our network code is written in Rust, App Privacy Report may not show all of 1Password's network traffic on that screen due to the App Privacy Report feature only reporting on certain types of network calls that 1Password doesn't rely on solely.

Since we have an explanation for the behaviour, there's no need to provide a screenshot after seven days anymore.

We have this filed internally. I'm not sure why the iOS feature doesn't report on all kinds of network calls and, since this is an Apple feature that we don't any control over, I would recommend that you report the issue to Apple as well. 🙂

-Dave

Sure 1P_Dave! Will do! Thanks for letting me know that it is a known issue that is currently investigated.

I’m a bit surprised that it apparently only needs non-Swift code to (accidentally in this case) circumvent a privacy/security feature, even if non-critical like the App Privacy Report. If true, I hope Apple will address it soon.

Damnatus

Thank you for the reply and for those details. It looks like the development team does have this issue in their backlog and early indications seem to point to iOS sometimes not recognizing network calls made by certain programming languages. 1Password is written in languages like Rust and Swift and it looks like certain calls from the non-Swift side of things aren't being recognized in certain situations.

After seven days, can you post a screenshot of what you see for the 1Password app in the App Privacy Report? This would help us to better understand the issue and move the investigation forward.

-Dave

ref: dev/core/core#16937

Hi 1P_Dave,

Hmm. Curious.
I know about the help page regarding used domains by 1Password, but thanks for sharing!

I have activated App Privacy Report since it’s introduction because I like to know what’s going on.

I just noticed after updating to iOS 17.3 that the report only recorded said one domain. I’m not sure if after an update the App Privacy Report log is reset. And I think before the point three update it showed more connections. But not sure.

The lack of recorded connected domains was just very obvious in 1P and I don’t know if it does affect other apps, but it doesn’t seem so. I’m more alerted about the possible unreliability of the App Privacy Report than 1Password, but I wanted to inform you, in case you can look into it even if it ends up to be an Apple issue. And if it is, I feel like that a company like AgileBits reporting it has more oomph than a single user.

In case it is isolated, I will do the usual: soft reset, deactivate and reactivate App Privacy Report and lastly reinstall 1P. But since you mentioned that in your case there seems a delay, I will wait a week to see if it needs time after the update.

If you want to look into it and need further info, let me know ☺️

Hello Damnatus! 👋

Thanks for the question! Apple's App Privacy Report is an iOS feature that reports and records data, sensor, and network activity from the apps that you use on your iPhone. I just took a look at mine and I see quite a few different connections listed for the 1Password app, although the date appears to be delayed by a few days for some of the domains.

How long ago did you turn on App Privacy Report? Has it been more than seven days?

If you'd like to know which domains 1Password uses, we've documented that here: 1Password ports and domains

-Dave