Apple publishes two sentences of substance about Private Cloud Compute, and both describe what does not happen to your data. Personal data “is not stored nor made accessible to Apple or anyone else,” and “outside experts can continue to verify this privacy promise at any time.”
Private Cloud Compute is the server side of Apple Intelligence, and it becomes live for most people on Monday, September 14, when iOS 27 arrives as a free update. Everything Apple has published about it for this launch fits in a few lines, which is the reason to read them closely rather than paraphrase them.
Key facts
| Item | What Apple publishes |
|---|---|
| What it is | The server side of Apple’s next-generation Apple Foundation Models |
| Data claim | Personal data “is not stored nor made accessible to Apple or anyone else” |
| Verification claim | “Outside experts can continue to verify this privacy promise at any time” |
| Named consumer use | Apple Reference Image on iPhone 18 Pro and iPhone 18 Pro Max |
| Named developer use | Foundation Models framework on Private Cloud Compute, no cloud API cost for Small Business Program developers |
| Retention period published | None |
| Live from | Monday, September 14, 2026, with iOS 27 |
What Apple actually publishes
Apple’s description is short. The next-generation Apple Foundation Models run on device and on servers through Private Cloud Compute, and the two claims above are attached to the server half. Apple also uses a separate term for the models themselves in a consumer footnote about Shortcuts, calling them AFM 3 Cloud models.
Don’t miss the best of The Mac Observer
Set us as a preferred source and our Apple reporting ranks higher in your Google Search results and Discover feed — one tap, no account changes.
The routing signal is indirect. Apple says server-side features carry daily usage limits, “including but not limited to Siri AI, Intelligent Photo Editing Tools, Image Playground, and AFM 3 Cloud models in Shortcuts.” A daily limit is the marker Apple uses for a feature that depends on its servers, but the phrase “including but not limited to” means the list is not the whole set.
The iPhone 18 Pro feature that names it
One feature is described end to end. Apple says Apple Reference Image performs secure, pixel-level signing of photo data at the time of capture, and its announcement describes signed sensor data that Private Cloud Compute develops into an unalterable reference image, stored alongside the edits so a photo can be shown to have come from a real capture.
That makes Apple Reference Image the clearest published example of a Private Cloud Compute request on the iPhone 18 Pro, and the only one where Apple names the destination rather than implying it.
The same servers, on the developer side
Apple’s developer announcement puts Private Cloud Compute in a second role. Developers in Apple’s Small Business Program can use the Foundation Models framework on Private Cloud Compute at no cloud API cost, which means third-party apps can send work to the same infrastructure.
Apple has not published a separate data statement for that path, and it has not said whether the promise quoted above covers requests an app makes on your behalf. On Apple Watch Series 12, Apple’s Audio Intelligence support document uses looser language again, naming “on-device and cloud-based AI models” without saying which servers.
What the wording covers, and what it does not
| Apple’s published statement | What it addresses | What it leaves open |
|---|---|---|
| “Is not stored nor made accessible to Apple or anyone else” | Storage of, and access to, personal data | How long a request exists while it is being handled |
| “Outside experts can continue to verify this privacy promise at any time” | Third-party verification | Who those experts are, and where the results are published |
| Signed sensor data developed into an unalterable reference image | One camera feature | Whether other Photos or Camera features use the same route |
| Server-side features are “subject to daily usage limits” | Which features rely on servers | The full list, since the footnote says “including but not limited to” |
| Foundation Models on Private Cloud Compute for developers | Cost to small developers | How third-party app requests are handled |
What Apple has not said
Apple has not published a retention period, a data centre location list, a description of what a request contains, or a consumer-facing way to check any of it. It has not said which parts of a Siri AI request are handled on the phone and which are not. It has not published an iOS 27 entry in its security releases index, which is where the technical detail for a release usually appears.
iOS 27, iPadOS 27, macOS 27 Golden Gate, watchOS 27 and visionOS 27 all ship on Monday, September 14. If Apple adds to the record, the release-day security content page is the place to watch. Our full event recap and the September 9 live blog cover what was announced alongside it.
