The Privacy That Was Decorative

Apple called it "Hide My Email." The FBI called it a subpoena.

In late February, someone sent a threatening email to Alexis Wilkins — girlfriend of FBI Director Kash Patel — from the address peaty_terms_1o@icloud.com. The address was generated by Apple's Hide My Email feature, the one marketed to iCloud+ subscribers as a way to "generate unique, random addresses." The one that exists so your real identity stays private.

Apple handed over the user's real name and iCloud email address on request. The whole lookup, from alias to human, appears to have taken less time than it takes to set up the feature.

This is not a scandal. This is architecture working as designed.

Hide My Email was never encryption. It was never anonymity. It was a forwarding layer — Apple always held the mapping table between your "hidden" alias and your actual account. The feature doesn't hide your email from Apple. It hides your email from the coffee shop loyalty program. The moment law enforcement asks, the mask lifts instantly, because the mask was always transparent from the company's side. The user in this case, Alden Ruml, had generated 134 aliases. Every single one of them resolved to the same person in Apple's records.

And this is the pattern that matters more than any individual case: privacy features that protect you from marketers while remaining fully legible to power.

The interface says "hide." The architecture says "index."

The same pattern runs elsewhere. Flock Safety — the company blanketing American cities with license plate readers — publicly stated in November 2025 that its system "is not used to enforce traffic violations." By December, Georgia State Patrol was citing a motorcyclist for holding a cell phone based on footage from a Flock camera. The ticket literally read: "CAPTURED ON FLOCK CAMERA."

Flock now partners with six traffic enforcement technology companies. Over 6,000 municipalities use its cameras. The company says the cameras fight serious crime. The cameras can't read the company's press releases.

This is what surveillance infrastructure does. It expands to fill available justification. Cameras sold to catch stolen cars catch people holding phones. Privacy features sold to protect users protect the company's relationship with law enforcement. The stated purpose is the sales pitch. The actual purpose is whatever the infrastructure makes possible.

Decorative privacy doesn't just fail to protect — it actively distorts the shared information space by manufacturing false confidence. When Apple markets "Hide My Email" as a privacy tool, users calibrate their behavior to a level of protection that doesn't exist. They send emails they wouldn't send from their main address. They assume a separation between identity and alias that the architecture never provided.

The interface lied about the building it was bolted onto.

And that's the real cost. Not that Apple complied with a lawful request — companies do that, and in this case the request involved a genuine threat. The cost is the delta between what the feature promises and what it delivers. Every user who believed "hide" meant "hidden from everyone" made decisions based on a fiction that Apple carefully maintained in its marketing while quietly contradicting in its terms of service.

Privacy theater is more dangerous than no privacy at all. A locked door you trust keeps you in the room. An unlocked door you know about lets you choose.

The pattern is old and it is accelerating. Features get privacy-flavored names. Surveillance gets public-safety-flavored names. The names face the user. The architecture faces the state. And the gap between the two is where the actual product lives — not protection, but the feeling of protection, sold at a premium to people who will never read the subpoena.

Apple charges for iCloud+. Flock charges municipalities per camera. Both sell the same thing: a comfortable distance between what you see and what's actually happening.

They used to call that a magic trick. Now they call it a feature.

Sources:

• Apple Gives FBI a User's Real Name Hidden Behind 'Hide My Email' Feature — 404 Media, 2026-03-26
• Traffic Violation! License Plate Reader Mission Creep Is Already Here — Electronic Frontier Foundation, 2026-03-25
• iCloud user learns 'Hide My Email' privacy does not apply to serious threats — 9to5Mac, 2026-03-26