Apple Patches Bug that Exposed Deleted Signal Messages

Key Takeaways

• iOS retained Signal notification text for up to 30 days after deletion
• FBI forensic tools proved deleted messages could be recovered
• Apple’s iOS 17.5.1 patch clears lingering notification data
• Signal advises disabling lock‑screen previews until update spreads
• Privacy experts warn similar risks may exist in other apps

Pulse Analysis

The flaw surfaced when Signal’s disappearing‑message feature failed to erase the text that iOS stores for push notifications. When a Signal alert appears on an iPhone, the operating system writes the preview into an internal database that persists for up to a month, regardless of the user’s deletion inside the app. Security researchers demonstrated that forensic tools, including those used by the FBI, could extract the hidden snippets, effectively undoing Signal’s end‑to‑end encryption promise for deleted chats.

Apple addressed the issue in the iOS 17.5.1 update, released within weeks of public disclosure. The patch clears the notification cache after a message is removed and adds stricter sandboxing for third‑party messaging apps. By fixing the storage loophole, Apple restores confidence in its privacy‑by‑design narrative, but the incident highlights how peripheral OS components can undermine app‑level security. Analysts expect other vendors to audit similar notification pathways to prevent comparable exposures.

Users should install the latest iOS update immediately and consider disabling lock‑screen previews for sensitive apps until the fix propagates. Signal has advised temporary workarounds, such as turning off notification previews and using the app’s built‑in “Screen Security” feature. The episode serves as a reminder that privacy‑focused services depend not only on encryption but also on the host operating system’s handling of metadata, prompting a broader industry push for secure notification frameworks.