Weeks after leaving Apple Park, a former employee’s phone buzzes with an update notification — for a product launch document they once helped plan. They can still read every word. That’s the scenario more than half a dozen former Apple employees described to The Information, painting a picture of a significant offboarding gap at a company that built its entire identity around privacy and security. The timing is especially uncomfortable: Apple is currently pursuing aggressive trade-secret litigation against former employees, including claims tied to OpenAI.
The Access Problem Apple Didn’t Fully Close
The mechanics of how confidential files slip through the cracks are surprisingly mundane — and structural.
Here’s how it reportedly works:
- Apple gives employees a 2TB iCloud plan and lets them merge it with their existing personal Apple Account. Since only one primary account can be active at a time, many employees simply use their personal one for convenience.
- A managed workplace folder exists and gets revoked when someone leaves — but not all internal documents are stored there.
- Files shared through iCloud Drive links or iMessage threads can land outside that managed boundary, syncing to personal devices indefinitely.
- Some former employees reportedly kept receiving update notifications on shared documents long after their last day.
Apple told The Information that “nothing in the filing relates to documents shared by, or stored in, iCloud,” referring specifically to its OpenAI lawsuit. The company also said it does not pursue former employees who accidentally retain documents. At least one cybersecurity professional who spoke to The Information argued the situation looks less like individual wrongdoing and more like a structural offboarding failure baked into a consumer-first cloud system — a perspective shared by several former employees.
Privacy Brand, Meet Reality
Apple’s aggressive trade-secret posture sits awkwardly alongside a cloud architecture that treats the personal-professional boundary like a polite suggestion.
Apple has framed its OpenAI case as involving “wrongfully taking Apple’s secret and confidential information.” Strong words from a company whose own cloud setup apparently handles the line between personal and professional storage the way a contractor handles a building permit — technically required, occasionally skipped. It’s the corporate equivalent of installing a Ring doorbell while leaving the back gate unlatched.
The broader lesson extends well beyond Cupertino. Any organization routing sensitive collaboration through consumer cloud tools — iCloud, personal Google accounts, you name it — faces the same structural risk. Apple has also pursued trade-secret claims in other high-profile disputes, including cases involving Rivos and Gerard Williams, making this offboarding vulnerability a particularly sharp reputational edge.
The pressure is building to separate personal and work cloud identities, move confidential files into managed enterprise storage, and treat employee offboarding as a security event — not just an HR checklist item someone signs off on between the farewell cake and the parking validation.
