Apple's keynote: what changes for your security and privacy

Apple's keynote on 9 September was mostly about hardware, but three of the announcements change what your devices know about you and about the world around them. The camera in the iPhone 18 Pro can now sign the photos it takes. The Apple Watch can transcribe the last 15 seconds of what it just heard. And the first foldable iPhone ships with no SIM tray anywhere in the world. Prices and screen sizes will be argued over for a week. These three will matter for years.

What was announced

The Pro line runs the A20 Pro and introduces variable aperture on the 48MP main camera. The Duo has a 7.6-inch inner display, a 5.4-inch cover display, titanium body, Touch ID in the side button and a hinge built from more than a hundred parts. The watches get the S11 chip and a heart rate sensor that reads every five seconds. None of that is our department. What follows is.

A camera that signs every pixel

Apple Reference Image is the most consequential thing in the whole keynote. Apple describes a new main camera sensor "that can sign every pixel it sees": shoot in Reference mode and the camera captures signed sensor data, which Private Cloud Compute turns into an unalterable reference image. It sits in the Photos app next to your edited shot like a digital negative, so anyone can compare the two and see what was changed. Third-party apps can display those reference images through new APIs in iOS, iPadOS and macOS 27, and Apple says support for the SynthID standard will arrive in a software update later this year to mark images made or altered with AI.

For photojournalism this is the first credible answer to a problem that has been getting worse for three years: a real photo and a generated one look identical, and denial is free. A signed original moves the argument from "trust me" to "compare for yourself". The catch is the mirror image of the benefit. Once signatures become normal, an unsigned photo starts to look like a lie, and plenty of honest photos are unsigned because they were taken on an old phone, screenshotted, or stripped of metadata by a messenger. We saw the same shape of problem with text when Claude began watermarking its output under EU rules: a mark that proves origin also creates a class of material that cannot prove it.

There is a second cost worth naming. Provenance is not neutral for the person holding the camera. A signed frame ties an image to a device and a moment, which is exactly what a court wants and exactly what a witness in a hostile place may not want. The feature is opt-in, and that is the right default. Regional footnotes tell their own story: in China it is not available at launch because of regulatory requirements, and in the EU you can develop and view reference images but not capture them yet.

A watch that heard the last 15 seconds

Audio Intelligence bundles four things on the Series 12 and Ultra 4: Sound Recognition for alarms and doorbells, Shazam, Siri Recap for summarising audio notes, and Live Rewind. The last one is the interesting one. Double-press the Digital Crown and the previous 15 seconds of speech appear as text on your wrist. For that to work, the watch has to be listening continuously to a rolling buffer.

Apple's answer to the obvious objection is unusually specific. The audio is handled in a hardware-isolated compartment of the S11 chip, described as a Secure Exclave. No recording is created or stored, the raw audio is said to be out of reach of the operating system, of apps, of the user and of Apple, and it is discarded after processing. Speakers are not identified. Siri Recap leaves out financial details and government ID numbers. Each feature is switched on separately, and Live Rewind plays a sound even when the watch is silent, alongside a full-screen animation and a microphone indicator.

The foldable has no SIM tray, and neither will more of the Pros

iPhone Duo is eSIM-only worldwide. The eSIM-only iPhone 18 Pro, meanwhile, is now sold in Bahrain, Canada, Guam, Japan, Kuwait, Mexico, Oman, Qatar, Saudi Arabia, the UAE, the US and the US Virgin Islands, which is a much longer list than last year. Apple frames eSIM as flexibility, security and extra battery, and all three are true.

What changes in practice is the local prepaid card. Buying a physical SIM at an airport kiosk and slotting it in is a habit that has quietly protected travellers, journalists and anyone who prefers not to roam on a number tied to their home account. With eSIM the profile is provisioned by the carrier through an app or a QR code, tied to an account, and issued under whatever identification the country demands. eSIM does not create the identity check, but it does make skipping it harder, and it leaves you dependent on a carrier that supports remote provisioning at all. If you travel to places where connectivity is politically sensitive, check eSIM support before you buy the phone, not after you land.

Europe gets a smaller phone

Siri AI launches in beta with iOS 27, in English first, and Apple states plainly that it will not be available initially in the EU on iOS, iPadOS and watchOS, together with every feature that depends on it. Audio Intelligence is not coming to the EU at launch either, and neither is Reference Image capture. Apple's footnote says the company is "working hard to find a path forward that preserves its users' privacy and security", which is as close as a press release gets to naming the standoff with European regulators.

Two more details deserve a mention. Apple Intelligence runs on-device where it can and falls back to Private Cloud Compute, which is a genuinely stronger design than a plain cloud assistant, but it is still a server that receives your request. And the features that lean on server models come with daily usage limits, with Apple saying expanded access will be sold for a fee later. The assistant that knows your context is on its way to becoming a subscription.

What to do with a new phone on day one