> Apple had Push Notification whitepapers that insisted the data was private, look how that turned out.
How did it turn out? Could you expand on or link to what you’re talking about?
It's not "the third party auditors", it is the scope of the audits that I don't trust. They pick the control "how long do you bake the chicken in the oven", and the report title cab be "enforcing harse conditions and conditions of stress in operations". And later some PR asshole will say "see the audit report summary? no failures to ourfite-proof processes!!!"
Whitepapers are whitepapers. Apple had Push Notification whitepapers that insisted the data was private, look how that turned out. I don't care about their third-party auditors, I want transparency and I don't care who calls me crazy for it.