Is Apple Notes Private? What Apple Can and Can't See (2026)
Is Apple Notes private? Standard iCloud notes are not end-to-end encrypted unless Advanced Data Protection is on. Locked notes always are. Here is the picture.
Apple Notes is private for most uses, but standard iCloud notes are not end-to-end encrypted unless you turn on Advanced Data Protection. Locked notes are end-to-end encrypted by default. So the answer to "is Apple Notes private" depends on two settings: whether your note is locked, and whether Advanced Data Protection is on for your iCloud account. With default settings, Apple holds the keys to most of your notes and can access their contents.
That distinction matters more than the marketing suggests. A note you typed last week sits on Apple's servers in a form Apple can read, unless you took one of two steps. Below is what Apple can see, what it cannot, and how to close the gap.
What Apple can access
Apple Notes syncs through iCloud by default. Each note you write on your Mac uploads to Apple's servers so it appears on your iPhone and iPad. That sync drives most privacy questions.
iCloud uses two encryption tiers. Standard data protection, the default, encrypts your notes in transit and at rest, but Apple keeps the encryption keys. That design lets Apple recover your account if you lose your password, and it also means Apple can decrypt the data when a valid legal request compels it. Apple's own iCloud documentation lists which categories use end-to-end encryption and which do not.
Advanced Data Protection changes the math. With it enabled, the encryption keys live only on your trusted devices, not on Apple's servers. Apple can no longer read those notes, and it cannot hand them over because it does not hold the key. The trade-off comes if you lose access to every trusted device and your recovery method, because then the data is gone for good. Apple cannot restore it.
So with default settings, Apple can access your unlocked iCloud notes. With Advanced Data Protection on, it cannot.
What is encrypted and what is not
End-to-end encryption (E2E) means only your devices hold the keys, so the provider cannot read the content. Standard encryption protects data from outsiders but leaves the provider able to decrypt it. Here is how Apple Notes data breaks down:
| Data | Encryption state |
|---|---|
| Locked note (any account) | End-to-end encrypted, always |
| Standard iCloud notes (default account) | Encrypted in transit and at rest, keys held by Apple |
| iCloud notes with Advanced Data Protection on | End-to-end encrypted |
| Notes stored "On My Mac" (no iCloud) | Local to your device, not uploaded |
| Note metadata (creation date, folder structure) | Limited E2E coverage even under Advanced Data Protection |
Two takeaways. A locked note is end-to-end encrypted regardless of your iCloud tier, which makes locking the easiest privacy win for sensitive notes. Some metadata stays visible to Apple even with Advanced Data Protection, so the feature protects content more than it hides the shape of your activity.
How to lock a note in Apple Notes
Locking a note encrypts it end-to-end and gates it behind a password, Touch ID, or Face ID. Steps on a Mac:
- Open the note you want to protect in the Notes app.
- Choose File, then Lock Note (or click the lock icon in the toolbar).
- Set a Notes password the first time, or use your existing one. You can also enable Touch ID.
- Click the lock icon again to close and secure the note.
A locked note stays encrypted on every synced device. Note the caveat: locking covers the body text, but Apple still processes the title and some attachments differently, so keep secrets out of the note's first line. For background on how cloud sync exposes note content, see the problem with cloud note apps.
When Apple Notes privacy is not enough
Locked notes and Advanced Data Protection cover most threat models. They fall short in a few cases. If you want your notes to stay on your machine, with no upload, no provider keys, and no recovery server, then a cloud-synced app is the wrong tool regardless of its encryption.
A local-only note app keeps each note as a file on your disk and never sends it to a server. There is no account to breach, no provider with a key, and no legal request that reaches a third party, because no third party holds the data. The downside is real: you handle your own backups, and sync across devices needs your own setup. If that trade matches what you want, the problem with cloud note apps and best local-first note apps for Mac go deeper on the options.
I build one of those apps, so treat this as disclosure rather than a ranking. Stik is a free, open-source quick-capture app for macOS. It writes each note as a plain .md file in ~/Documents/Stik/ on your Mac. There is no account and no cloud, and search runs on-device through Apple's NaturalLanguage framework, so nothing leaves the machine to find a note. You can read the code on GitHub. A global shortcut opens a capture window, you type, and the file lands in your folder.
Here is the comparison. Apple Notes with Advanced Data Protection is private against most adversaries and far easier to set up than a local-files workflow. A local app like Stik trades convenience for the guarantee that your notes never touch anyone's server. Pick by what you are protecting against. If you are weighing Apple's app against alternatives, Obsidian vs Apple Notes and Apple Notes vs Bear cover the day-to-day differences. If your worry is search privacy rather than storage, does Apple Notes have AI search explains where that processing happens.
Frequently asked questions
Is Apple Notes end-to-end encrypted?
Not by default. Standard iCloud notes are encrypted in transit and at rest, but Apple holds the keys and can decrypt them. Locked notes are end-to-end encrypted at all times, and all iCloud notes become end-to-end encrypted once you turn on Advanced Data Protection.
Can Apple read my Apple Notes?
With default settings, yes, Apple can decrypt your unlocked iCloud notes because it holds the encryption keys. Locked notes stay private because they are end-to-end encrypted. Turning on Advanced Data Protection removes Apple's ability to read your unlocked notes too.
Does Advanced Data Protection make Apple Notes fully private?
It makes the content of your notes unreadable to Apple, since the keys live only on your devices. Some metadata, such as folder structure and timestamps, can still be visible. You also lose Apple's ability to recover your data if you lose every trusted device and your recovery method.
Are notes stored "On My Mac" safer than iCloud notes?
Notes in the "On My Mac" account stay on your device and never upload to iCloud, so Apple's servers never receive them. They rely on your Mac's disk encryption (FileVault) and your local backups instead. The trade-off is no sync to your other devices.
What is the most private way to take notes on a Mac?
A local-only app that stores notes as files on your disk and never syncs to a server is the most private option, because no provider ever holds your data or its keys. Apps like Stik keep notes as plain .md files on your Mac with no account. The cost is that you manage your own backups and any cross-device sync. See best local-first note apps for Mac for alternatives.