{
  "slug": "icloud-mail",
  "category": "email-providers",
  "name": "iCloud Mail",
  "description": "Email service included with every Apple Account, with @icloud.com addresses and custom domains for iCloud+ subscribers.",
  "website": "https://www.icloud.com/mail",
  "license": null,
  "platforms": [],
  "jurisdiction": {
    "code": "US",
    "name": "United States",
    "eyes": "Five Eyes",
    "eu": false,
    "gdpr": false,
    "cloud_act": "provider"
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "D",
  "score": 47,
  "coverage": 100,
  "summary": "iCloud Mail scores 47 out of 100 (grade D) on the email providers criteria. It meets 8 of 19 criteria: no trackers or telemetry, no ads or data sales, transparency report, tells users about requests, TLS configuration, security headers, open protocols and custom domains. It partly meets encrypted mailbox storage, IMAP support and SMTP submission. It does not meet open source, independent audit, end-to-end encryption, sign up without personal data, POP3 support, mail transport security, Sender Rewriting Scheme and ARC sealing. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade A+.",
  "url": "https://privacyratings.com/email-providers/icloud-mail/",
  "markdown": "https://privacyratings.com/email-providers/icloud-mail/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "yes",
      "evidence": "https://www.apple.com/legal/privacy/data/en/device-analytics/",
      "note": "Analytics are only shared with Apple with consent, and iCloud.com loads no third-party trackers."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.apple.com/legal/privacy/en-ww/",
      "note": "Funded by device sales and iCloud+ subscriptions. No ads, and Apple states that it does not sell personal data."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "No independent audit is published."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.apple.com/legal/transparency/",
      "note": "Apple publishes counts of government and private party requests twice a year."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://www.apple.com/legal/privacy/law-enforcement-guidelines-us.pdf",
      "note": "Apple notifies customers when their account information is sought, unless prohibited by law or in emergencies."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=www.icloud.com&hideResults=on",
      "note": "Grade A+"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=www.icloud.com",
      "note": "Grade A+ (130/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "pending",
      "evidence": null,
      "note": "Not tested yet."
    },
    "e2ee": {
      "title": "End-to-end encryption",
      "weight": 3,
      "answer": "no",
      "evidence": "https://support.apple.com/en-us/102651",
      "note": "iCloud Mail is not end-to-end encrypted, even with Advanced Data Protection. S/MIME works in Apple Mail."
    },
    "encrypted_storage": {
      "title": "Encrypted mailbox storage",
      "weight": 3,
      "answer": "partial",
      "evidence": "https://support.apple.com/en-us/102651",
      "note": "Mail is encrypted on the server with keys Apple holds."
    },
    "open_protocols": {
      "title": "Open protocols",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://support.apple.com/en-us/102525",
      "note": "IMAP and SMTP work with other apps. POP3 is not supported."
    },
    "custom_domains": {
      "title": "Custom domains",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://support.apple.com/en-us/102540",
      "note": "Available with any iCloud+ subscription."
    },
    "anonymous_signup": {
      "title": "Sign up without personal data",
      "weight": 2,
      "answer": "no",
      "evidence": "https://support.apple.com/en-us/108647",
      "note": "Creating an Apple Account asks for a birth date, an email address and a phone number."
    },
    "mail_standards": {
      "title": "Email security standards",
      "weight": 2,
      "answer": "pending",
      "evidence": null,
      "note": "Not tested yet."
    },
    "imap_standards": {
      "title": "IMAP support",
      "weight": 2,
      "answer": "partial",
      "evidence": null,
      "note": "imap.mail.me.com:993 (implicit TLS). IMAP4rev1 advertised, no IDLE before login."
    },
    "pop3_standards": {
      "title": "POP3 support",
      "weight": 1,
      "answer": "no",
      "evidence": null,
      "note": "Not offered."
    },
    "smtp_standards": {
      "title": "SMTP submission",
      "weight": 2,
      "answer": "partial",
      "evidence": null,
      "note": "smtp.mail.me.com:587 (STARTTLS). SMTPUTF8, 8BITMIME, PIPELINING and AUTH advertised."
    },
    "transport_security": {
      "title": "Mail transport security",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Passes: SPF, DMARC quarantine. Missing: MTA-STS missing, TLS-RPT, DNSSEC, DANE none."
    },
    "srs": {
      "title": "Sender Rewriting Scheme",
      "weight": 1,
      "answer": "no",
      "evidence": null,
      "note": "No published documentation on SRS for forwarded mail."
    },
    "arc": {
      "title": "ARC sealing",
      "weight": 1,
      "answer": "no",
      "evidence": null,
      "note": "No published documentation on ARC signing or validation."
    }
  },
  "tests": {
    "ssllabs": "A+",
    "observatory": "A+",
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [],
    "tested_at": "2026-10-01T11:00:00.315Z"
  },
  "last_modified": "2026-10-01T11:14:42Z"
}