Does Impersonation Risk Detection keep my data private?
Apple says that Impersonation Risk Detection performs its analysis on-device, and that the data used to generate the risk level doesn’t leave your device. The company also highlights that the contents of your email, photos, or messages are not analyzed for the risk assessment. When an app requests a risk assessment, Apple claims it only receives information about the type of action you performed in that specific app. Once the risk level is generated, apps don’t receive any additional data about you.