All Your Eggs in One Basket, The Apple Disaster Scenario
Mac Apps
TL;DR: Mac power users vet apps carefully and then hand their entire digital life to Apple without a second thought. Apple can close your account on suspicion alone, keep your unspent balance, and never tell you why; a federal judge confirmed all of that in 2023 and threw the case out. An Apple Account is simultaneously an authentication system, cloud-storage account, software license repository, device-activation credential, communications identity, and payment account. A full lockout can therefore affect data, purchases, services, and hardware management at once.This post covers how accounts get closed, what you lose when it happens, why getting back in is so hard, and eleven things to do about it now.
All Your Eggs in One Basket, The Disaster Scenario
When the conversation turns to abandoning third party apps in favor of using Apple's default stack, I keep waiting for someone to mention the huge red flag that should instantly discourage making that move without taking some intense protective measures.
The steps I take before adding an app to my workflow are second nature. but detailed. They are probably the same steps most of you take. First I evaluate the feature set to see if it meets my needs. I look at the privacy policy, the cost of buying the app, and the cost of keeping it updated. Any app that takes a significant investment of money or time gets some research about the developer or the company behind it. Sometimes a one-person development team means the app dies when the dev loses interest. Finally I look at what third-party services the app depends on. Dropping $90 on an app Google can kill with an abitrary decsion isn't a deal breaker every time. Just most of the time.
Until last December, I did not apply the same scrutiny to the infrastructure underneath all of it, the company behind much of my digital life. I'm talking about Apple. An entire career in Mac support didn't give me a full understanding of what losing access to an Apple Account would do to someone personally and professionally.
Then Paris Buttfield-Addison, who has written more than twenty books on Apple development and helps put on the longest-running Apple developer conference Apple doesn't run itself, found his account closed for reasons Apple would not specify. After some of the biggest names in Mac journalism publicized the case, his account was restored, but Apple has refused to go on the record with any details about why it happened or, more importantly, what you and I could do to keep it from happening to us.
Suspicion is the Standard
It's more common than you'd think.
- Using a gift card, even one from a major retailer, that's been tampered with without your knowledge
- Filing a chargeback with your credit card company instead of letting Apple arbitrate a dispute over a purchase
- Making one too many refund requests
- Hijacked credentials
- Using Advanced Data Protection and losing access to your recovery credentials
- An arbitrary decision by Apple with no explanation, which happens to developer accounts as well
None of this requires Apple to be right. In 2023 a federal judge dismissed a class action over exactly this question, and the reasoning matters more than the outcome. Matthew Price ran multiple chargebacks on in-app purchases that didn't work, some of them after Apple's own support told him to take it up with his bank. Apple terminated his account, kept the $7.63 balance sitting in it, and cut him off from what he says was $24,590.05 in purchased content. Judge Haywood Gilliam dismissed the case without leave to amend: "It is simply immaterial whether Plaintiff's multiple chargebacks were actually fraudulent or manipulative because even as alleged, Apple suspected that they were." Suspicion is the standard, and you agreed to it when you accepted the terms. The same terms say you "shall not sue or recover any damages from Apple" over a decision to terminate your access.
What Actually Breaks
- Identity. If your Apple Account is an @icloud.com / @me.com / @mac.com address, closing the account kills the email address. Everything that uses it for password resets, two-factor, and billing now points at a dead mailbox.
- iCloud data. Photos, Messages history, iCloud Drive, Notes, contacts, calendars, Safari data and Passwords all become inaccessible.
- Account balance. Any unused Apple Account credit is stranded, and a court has already said Apple has no obligation to give it back.
- Purchased software and media. Apps, books, films, music. The apps are what most people will miss; you can't update them and you can't reinstall them.
- Hardware. Your iPhone, iPad, Watch, AirPods, Apple TV, HomePod and Macs are effectively bricked. Not literally dead, but unable to sync, update, or function normally. Devices sign out of iMessage and can't sign back in.
- Activation Lock. A device tied to an account you no longer control can't be cleanly released, and erasing it does not clear the lock.
- Subscriptions. Apple One, iCloud+, Apple Music, App Store subscriptions and anything else billed through Apple.
- Apple Developer ID. Apps in review, TestFlight, certificates, provisioning profiles and App Store Connect, all gone.
- Access to Apple's support channels. The Secure File Transfer system Apple uses to collect your documentation requires an Apple Account sign-in, and so do most of the escalation paths Apple suggests. A locked account can't ask for help about being locked.
Why Getting It Back Is Hard
Apple won't tell you why your account was closed, reportedly out of fear that its fraud prevention methods will be reverse engineered. Frontline support staff don't have access to the reason either, so they can't find out on your behalf and they can't escalate your issue. Making a new account on hardware already linked to suspected fraud can earn you another ban for attempting to circumvent fraud prevention. I could find no documented path to export data from a closed account.
How to Protect Yourself
- Never buy an Apple Gift Card from anyone but Apple. If you get one as a gift, that's a harder call.
- Never attempt a credit card chargeback on an Apple purchase of any kind.
- Turn on Stolen Device Protection, which means committing to 2FA, a passcode, Face or Touch ID, Significant Locations and Find My.
- Shield your device passcode in public, every single time, and make it a complex alphanumeric string instead of six digits.
- Set up a recovery contact and a recovery key.
- Some forum users keep a second Apple Account for media and purchases. I haven't tested it, but the logic holds.
- Do not use an @icloud.com address as your Apple Account.
- Own your email domain.
- Keep local, offline copies of everything.
- Run a data export on a schedule at privacy.apple.com.
- Whenever possible, download software from the developer rather than the App Store.
Tomorrow I'll post the apps and methods that let you keep using Mail, Calendar, Photos, Contacts and file storage without putting all of it inside one account Apple can close on suspicion.