Comment by objclxt | Hacker News Reader

Comment by objclxt | Hacker News Reader

Parent Full thread

> a lot of transaction data is already leaked to wallet providers (Google, Apple, Samsung) […] Note that these wallets get access to ALL card transactions, including physical card swipes, and not just those conducted via their platform.

That’s not true at all for Apple Pay: “Apple Pay doesn’t collect any transaction information that can be tied back to the user. Payment transactions are between the user, the merchant and the card issuer.”[1]

The system is designed such that transactional information goes directly from the bank’s server to your device, and doesn’t pass through Apple’s servers (unless you’re using Apple Card)

[1]: https://support.apple.com/en-gb/guide/security/sec82e7bc3f8/...

Good to know that Apple does not collect and store this data. The original issue, however, is that the banks continue to share this data with wallet providers. I have seen notifications on my phone wallet when using the physical card, which I found suspicious.

From the brief research I did trying to validate your claim, it looks like there's a second feature you can opt into that tracks transactions similar to a budget app. But as far as I can tell that's a distinct thing from the payments part.

That is not what they said. If they meant that, they would say: "Apply Pay doesn't collect any transaction information." They explicitly added the clause: "that can be tied back to the user". That means they do collect transaction information.

As they are only bound to providing a interpretation of "that can be tied back to the user" that is "technically correct", like how a monkey paw only needs to technically grant your wish, all they have to do is not link the transaction to your name and they have technically fulfilled their end of the bargain. That their highly paid legal team deliberately did not disclose higher standards means we should not engage in wishful thinking. They can tighten up their legally binding language if they want some trust.

Reply on news.ycombinator.com