Apple Sets Privacy Rules for Third-Party Access to Live Activities and Notifications

As part of its interoperability requirements in the European Union, Apple has been updating iOS to support features that allow AirPods-like pairing, notification forwarding, and other integration capabilities for third-party wearables on iPhone.

In the iOS 26.5 beta released on Monday, Apple introduced Live Activities forwarding, expanding what connected third-party devices can display from the iPhone. Alongside this change, Apple has also updated its Developer Program License Agreement to define new rules governing how these forwarding features can be accessed and implemented.

The adjustments are part of Apple’s broader effort to comply with EU interoperability regulations, which aim to give non-Apple devices deeper access to system-level functionality while maintaining security and privacy standards.

In a new section titled “3.3.3 (J), Accessory Notifications Framework and Accessory Live Activities Framework,” Apple lays out strict rules governing how third-party developers can handle forwarded iPhone data.

Under the updated guidelines, developers are explicitly prohibited from using Forwarding Information for advertising, profiling, AI model training, or location tracking. They are also not allowed to share this data with any other app or any device beyond the designated accessory the user has authorized.

Apple further states that notification data forwarded from the iPhone cannot be stored on servers, in the cloud, or on any remote system. Instead, the information must be decrypted only on the accessory itself, ensuring it never passes through or is processed by external infrastructure.

The rules also prevent developers from altering forwarded content in any way that could change its meaning. In addition, accessories receiving this data are forbidden from sharing it—or any associated encryption keys—with other devices, including the user’s own iPhone. In effect, Apple is requiring that the information remain tightly bound to the intended device.

Interestingly, Apple notes that even if an app does not actively use these frameworks, the system may still forward notifications to a compatible third-party accessory if the user enables the feature.

These changes come in the context of Apple’s ongoing compliance efforts under the EU’s Digital Markets Act (DMA). Apple previously warned that DMA-related interoperability requirements could introduce security and privacy risks, including requests for access to sensitive data such as full notification contents and Wi-Fi connection histories.

The revised developer rules appear to reflect Apple’s attempt to address those concerns by enforcing strict limitations on data usage. Overall, the framework emphasizes no tracking, no profiling, no cloud storage, and no cross-device sharing, placing full responsibility on developers to ensure compliance.