Is Apple Scanning Your iPhone Photos? Enhanced Visual Search Explained

What it is

Yes. A feature called Enhanced Visual Search looks through your Photos library, and on most iPhones running iOS 18.1 or later, it's already turned on. Search for a landmark by name — "Golden Gate Bridge," say — and you'll get back every photo and video where it shows up, location tags or not. It's a step beyond Visual Look Up, which only recognizes objects in a single photo you're already viewing. This one works across your whole library and involves a round trip to Apple's servers. It arrived with iOS 18.1 and macOS 15.1, folded into the broader iOS 18 / iPadOS 18 / macOS Sequoia release, and it still isn't available everywhere.

How it actually works

It starts on your device. An on-device model looks at a photo, decides whether it probably contains a landmark, and — if so — builds a low-fidelity mathematical summary called an embedding. Not a copy of the photo. Closer to a fingerprint of what's in it.

Three privacy techniques take it from there, working together to get an answer back from Apple's landmark database without exposing much:

• Homomorphic encryption — the embedding gets encrypted before it leaves your device, and Apple's servers match it against known landmarks without ever holding a decryption key. Only your device can unlock the result.
• Differential privacy — your phone fires off a handful of decoy requests alongside the real one, so nobody watching server traffic can tell which one was genuine.
• An OHTTP relay — a third-party network strips your IP address before the request reaches Apple, so it can't be traced back to your device or account.

Apple says the request itself isn't stored once results come back, and it isn't linked to your Apple Account (Apple Support; 9to5Mac). That's a different concern from removing location metadata from your photos — one's about where a photo says it was taken, the other's about what's visible in the frame.

Why it matters for your privacy

Here's the part the headlines tend to skip: most of the technical criticism of Enhanced Visual Search isn't really about the cryptography. Cryptographers who've looked closely generally agree it's built thoughtfully. The real objection is about consent and defaults.

Johns Hopkins cryptography professor Matthew Green put it plainly — finding out about a feature only after Apple has already switched it on for you "erodes trust," no matter how sound the engineering underneath. Developer Michael Tsai went further: the feature ships enabled with no upfront prompt, even for people who've already opted out of uploading photos to iCloud. Developer Jeff Johnson raised the same worry from a different angle — the choice of whether to run this at all got made for users, not by them (BankInfoSecurity).

Put simply: Apple's engineering answers "can this be intercepted or traced back to me" reasonably well. It doesn't answer "should this have asked me first." For the fuller picture of how Apple's on-device AI touches your photo library, see Does Apple Intelligence See Your Photos? — or, more broadly, check which apps on your iPhone can access your photos at all.

How Privara handles this

Zoom out and there's a bigger pattern worth sitting with: anything living in your system Photos library is subject to whatever new analysis feature Apple ships next and flips on by default. Enhanced Visual Search is this year's example. There'll be another one next year. The only way to opt a photo, video, document, or contact out of that pattern entirely is to keep it out of the system library in the first place.

That's what Privara is for. It holds your private photos, videos, documents, and contacts inside a single AES-256-encrypted vault — encrypted at rest, not just tucked out of view — disguised as an ordinary calculator that only opens with your PIN. Nothing gets uploaded anywhere by default, there's no account to create, and it's zero-knowledge, so what's inside stays inside. One vault covers all four content types: a landmark-search feature is about photos and videos, sure, but the same shared-library exposure applies just as much to documents and contacts.

If there are photos or videos you'd simply rather Apple's Photos app — and every feature layered on top of it — never touch, moving them into Privara's vault is the direct way to do that. Download Privara on the App Store to get started.

Frequently Asked Questions

Is Enhanced Visual Search on by default?

Yes. Apple ships it turned on for eligible devices running iOS 18.1 / macOS 15.1 or later, so you'll need to go into Settings to turn it off if you'd rather it not run.

Does Apple see my actual photos with Enhanced Visual Search?

No. An on-device model creates a low-fidelity mathematical embedding of a photo, and only that homomorphically encrypted embedding gets sent to Apple's servers — by Apple's own description, it never receives the plaintext image or learns what's pictured in it.

How do I turn off Enhanced Visual Search on my iPhone?

Open Settings, tap Apps, tap Photos, scroll to the bottom, and toggle Enhanced Visual Search off. On a Mac, it's under Photos > Settings > General.

Why did people call Enhanced Visual Search a privacy problem if it's encrypted?

The pushback wasn't really about the cryptography — reviewers generally called the design privacy-preserving. The objection was that Apple turned on a feature sending photo-derived data off-device by default, without asking first.