As we eagerly await the release of iOS 26.5 in May, Apple has rolled out iOS 26.4.2 to address a privacy issue and provide the usual bug fixes and security updates. The release notes are brief, but one important fix is for notifications that were not being properly deleted:
The issue of notifications being retained on the device has prompted Apple to also release iOS 18.7.8 with the same fix. While iPadOS has received the corresponding updates, macOS, watchOS, and visionOS remain unaffected, indicating that the problem was specific to iPhones and iPads.
Although most users may not have noticed this issue, the fact that deleted notifications were still stored on the device could pose a serious security risk. This is particularly concerning considering the sensitive information often found in notifications.
The recent report by 404 Media about the FBI extracting deleted Signal messages from an iPhone’s Notification database sheds light on the importance of properly managing notification data. The fact that these notifications persisted even after the app was deleted raises significant security concerns.
While iOS 26.4.2 aims to address this issue, it’s essential for users of secure messaging apps like Signal to review their notification settings to prevent personal information from being exposed on the lock screen.
