iCloud Backup and Your Vault: What's Backed Up, What Stays Local
iCloud Backup quietly sweeps up more than most people realize — but not everything, and not the same way for every app. This explainer covers exactly what does and doesn't end up in that nightly snapshot: app data, Camera Roll photos, who holds the encryption key under standard settings versus Advanced Data Protection, and why content that's genuinely stored on-device never appears in an iCloud Backup at all, no matter how your settings are configured.
What It Is
iCloud Backup is a nightly snapshot of your iPhone — app data, device settings, and, depending on one toggle, your Camera Roll. It's separate from iCloud Photos and iCloud Drive, both of which sync continuously instead of backing up on a schedule. Knowing which system actually touches your content matters if you care where your private photos, documents, or notes end up. Not everything you assume is "in the cloud" actually is. And not everything you assume stays local actually does.
How It Actually Works
What's inside a nightly iCloud Backup
By default, iCloud Backup includes app data for apps that keep their files inside the app's own local container — most third-party apps, plus Apple apps that don't already sync with iCloud. If an app instead stores its data in iCloud Drive, that data lives there, not in the nightly backup. It's already synced elsewhere.
Photos work on a separate rule. If iCloud Photos is off, your Camera Roll photos and videos — plus People & Pets face data — ride along in the backup. If iCloud Photos is on, those files sync continuously to that service instead and are excluded from the backup. They're already stored, just not through this path.
Who can actually decrypt it
Under standard settings, Apple holds the encryption key for iCloud Backup in its own servers. That means Apple can decrypt backup contents, including in response to legal process. Turning on Advanced Data Protection changes that: iCloud Backup becomes end-to-end encrypted, and only your own trusted, signed-in devices hold the key — not Apple, not a data center, not a subpoena. If you'd rather back up private photos without relying on iCloud at all, or want the fuller picture of what end-to-end encryption actually changes for your backups, those cover the tradeoffs in more depth.
Why It Matters for Your Privacy
The iCloud Photos vs. iCloud Backup mix-up
This is where most people get tripped up. Turning off iCloud Photos to save storage doesn't automatically mean your photos are "fully local" — as long as iCloud Backup is on, those same photos can still ride along in the nightly snapshot. Disabling one syncing feature doesn't mean you've disabled the other, and Apple's own settings screen doesn't always make that distinction obvious.
Why local-only content sidesteps both systems
Apple distinguishes between standard-protected and end-to-end-protected data categories — but an app that never writes into any iCloud-synced container in the first place doesn't fall into either bucket. Its content is never uploaded to Apple's servers, so the standard-vs-Advanced-Data-Protection distinction simply doesn't apply. That's the real difference between true on-device storage and the privacy gold standard it represents, versus content that's merely hidden from view but still synced somewhere. Worth thinking through, too, if you're keeping specific photos private on a shared or family iCloud account — the same backup behavior applies there.
Frequently Asked Questions
Does iCloud Backup include my Camera Roll photos?
Only if iCloud Photos is turned off. When iCloud Photos is on, your photos and videos sync continuously to that separate service and are excluded from the nightly iCloud Backup — they're not duplicated into it.
Does iCloud Backup include data from apps like Privara?
iCloud Backup includes data from apps that keep their files in the app's own local container, unless the app instead stores data in iCloud Drive. An app that never writes to any iCloud-synced container — like a local, account-free vault — is never included in iCloud Backup in the first place, regardless of your backup settings.
Can Apple read what's inside my iCloud Backup?
Under standard settings, yes. Apple holds the encryption key for iCloud Backup on its own servers, so Apple can decrypt it, including in response to legal process. Turning on Advanced Data Protection makes iCloud Backup end-to-end encrypted, so only your own trusted devices can decrypt it.
If I restore my iPhone from an iCloud Backup, will a local vault's contents come back?
No. If a vault app stores its content only on-device and never writes it into a backed-up or iCloud-synced container, restoring from iCloud Backup won't bring that content back. Restoring only recovers what was actually backed up in the first place.
How Privara Handles This
Privara doesn't write anything into an iCloud-synced container — no iCloud Drive, no iCloud Photos, no account to sign into. Whatever you keep in your vault is never swept into an iCloud Backup, never touches a restore, and is never something Apple, or anyone else, holds a key to. That's true no matter what your iCloud or Advanced Data Protection settings are set to.
And that holds for more than photos. One AES-256-encrypted vault covers your photos, videos, documents, and contacts together, so you're not piecing together separate tools for each. Encryption at rest, not just hidden from view, behind a calculator disguise that opens only when you enter your PIN into what looks like an ordinary calculator app. Nothing uploads by default. No account stands between you and your own content.
If you want your private photos, videos, documents, and contacts to genuinely stay off iCloud entirely — not just off your Camera Roll — download Privara and see for yourself.