Apple is facing a proposed class action lawsuit over claims that its Hide My Email feature failed to protect users’ real email addresses as promised. The case argues that Apple knew about an alleged privacy flaw for more than a year while continuing to promote the feature as part of its wider privacy services.
Hide My Email creates random email addresses that forward messages to a user’s personal inbox. Apple includes a basic version with Sign in with Apple, while iCloud+ subscribers can create additional addresses for websites, newsletters, apps, and other online services.
Don’t miss the best of The Mac Observer
Set us as a preferred source and our Apple reporting ranks higher in your Google Search results and Discover feed — one tap, no account changes.
Lawsuit questions Apple’s privacy claims
404 Media previously reported that a security researcher informed Apple about the alleged flaw in June 2025. Apple acknowledged the report several weeks later, but the researcher claimed the issue remained exploitable even after Apple said it had addressed the problem in March 2026.
The lawsuit was filed by California resident Anthony Alvarez, who says he paid for iCloud+ and relied on Apple’s claim that Hide My Email would keep his personal address private. He argues that customers paid a premium for Apple products and subscriptions partly because the company promotes privacy as a major benefit.
MacRumors reported that Alvarez wants the court to approve four proposed groups, including nationwide and California classes covering Apple customers and iCloud+ subscribers who used Hide My Email.
The complaint says the combined value of the proposed claims exceeds $5 million, although it does not provide a detailed calculation. It also refers to an earlier privacy issue involving Apple’s randomized MAC address feature, which researchers said could expose real hardware identifiers.
Alvarez is seeking financial compensation, a jury trial, and a court order requiring Apple to fix Hide My Email or clearly explain its limitations. Apple has not publicly commented on the lawsuit.
Discussion