Apple Mail Privacy Protection: What It Does and Why It Matters for Your Privacy

In September 2021, Apple introduced Mail Privacy Protection (MPP) in iOS 15 and macOS Monterey. It was the biggest single change to email privacy in years — and most people do not fully understand what it does.

What Mail Privacy Protection does

Two things:

1. Pre-fetches remote content

When you receive an email, Apple Mail automatically downloads all remote content (images, tracking pixels, fonts) through Apple's proxy servers — whether or not you open the email.

This breaks email tracking in two ways:

• Open tracking becomes useless: Senders use a tiny invisible image (tracking pixel) to detect when you open an email. With MPP, Apple downloads the pixel automatically, so every email appears "opened" — even ones you never read.
• Timing is lost: Senders cannot tell when you opened an email because Apple pre-fetches at its own schedule, not when you actually read it.

2. Hides your IP address

The remote content is downloaded through Apple's proxy network, not from your device directly. The sender's tracking system sees Apple's proxy IP, not your real IP address. This means:

• Senders cannot determine your geographic location from email opens
• Senders cannot link your email activity to your browsing activity via IP
• Device fingerprinting via email is significantly harder

What it does NOT do

MPP is often misunderstood. Here is what it does not protect:

• Click tracking still works. When you click a link in an email, you visit the sender's tracking URL directly from your device. MPP does not intercept link clicks. The sender knows you clicked, when, and from what IP.
• Email content is not encrypted. MPP does not add encryption to email. Your email provider (Gmail, iCloud, etc.) can still read your email content.
• Email metadata is still exposed. Subject lines, sender/recipient addresses, timestamps — all metadata is unaffected by MPP.
• Only works in Apple Mail. If you read email in Gmail's app, Outlook's app, or a web browser — even on an iPhone — MPP does not apply. It is specific to the Apple Mail app.
• Does not block the email itself. MPP is not a spam filter. It does not prevent unwanted email from arriving. It only limits what the sender can learn from your behavior after delivery.

Impact on email senders

For email marketers, MPP was a major disruption:

Apple Mail accounts for roughly 50-60% of email opens globally. When half your audience's open data is meaningless, open rate as a metric becomes unreliable for everyone.

How other email clients compare

What you can do for more privacy

MPP is a good start, but it is one layer. For comprehensive email privacy:

1. Use Apple Mail with MPP enabled (Settings → Mail → Privacy Protection → Protect Mail Activity) — or ProtonMail, which offers similar protection
2. Use email aliases to compartmentalize your identity across services — senders cannot correlate your accounts even if they track clicks
3. Disable remote image loading in email clients that do not proxy (Outlook, Yahoo) — this blocks all tracking pixels but also breaks email design
4. Use a VPN for link clicks — MPP hides your IP on opens but not on clicks. A VPN covers the click gap.
5. Be aware that click tracking always works — Every link you click in an email is trackable regardless of MPP, VPN, or any other tool. The only way to avoid click tracking is to not click (copy the URL and visit directly).

For a broader privacy strategy, see How to Migrate from Gmail to a Privacy-Focused Setup and What Your Email Metadata Reveals About You.