I've been talking about how on-device ML models may be used by third party apps to profile users' data even when end-to-end encrypted since 2019.

I'd previously written two articles detailing how this may be done. I conducted experiments to show how efficient and silent this profiling could be. Read these on my blog.

Part 1: Encrypted, But Not Invisible: How Apps Could Use On-Device ML to Profile You

Part 2: On-Device LLMs & Your Encrypted Data: The Profiling Risk Amplified

In the light of the latest WhatsApp lawsuit, I revisited this. Read more below.

Part 3: The WhatsApp Lawsuit and a Tangent on What's Technically Possible