Does Full Access to Photos Include the Hidden Album?
When Instagram, WhatsApp, or a dating app requests 'Full Access' to your Photos, can it scan your Hidden Album? Here is how iOS 18 sandboxing and PhotoKit permissions work.
Julian Vance
Lead Security Researcher
- Granting 'Full Access' gives an app permission to query the entire PHPhotoLibrary, but iOS limits direct access to the biometric Hidden album.
- However, photos imported or cached prior to being marked 'Hidden' remain accessible in third-party database logs.
- Third-party apps routinely harvest EXIF metadata (GPS coordinates, timestamps, camera serial numbers) from every permitted photo.
- Using LinkGrow's In-App Secure Camera bypasses PhotoKit permissions completely, keeping files 100% invisible to social apps.
What 'Full Access' Really Grants Third-Party Apps
Every day, apps like Instagram, Snapchat, dating apps, and photo editors prompt you with the dialog: 'Allow app to access all photos?' Most users tap 'Allow Full Access' out of convenience.
Under the hood, this grants the app unrestricted programmatic access to Apple's `PHPhotoLibrary` API. The application can query, index, and upload your entire camera roll, complete with location coordinates, facial recognition tags, and burst sequences.
Can Apps Programmatically Read the Hidden Album?
In iOS 16 and later, Apple introduced biometric gating: when an app requests photos via the modern `PHPickerViewController`, the user must explicitly provide Face ID or Touch ID to select items from the Hidden album.
However, serious vulnerabilities remain: if a photo was in your general camera roll when an app previously scanned your library, that app's local cache or remote analytics server may already possess a copy. Furthermore, aggressive social apps query background assets, thumbnail caches, and shared photo streams that are not protected by biometric locks.
| Photo Location | Visible to 'Full Access' Apps? | Visible to LinkGrow Vault? |
|---|---|---|
| Standard Camera Roll | YES — Immediate programmatic read | No — Vault is independent |
| Recent Screenshots | YES — Auto-scanned for text/OCR | No — Isolated sandbox |
| Apple Hidden Album | Gated by Face ID, but cache leaks occur | No — Separate encryption |
| LinkGrow Encrypted Container | IMPOSSIBLE — App sandbox prevents access | YES — Only after pattern unlock |
The Solution: Zero-Permission Storage
Rather than trusting dozens of third-party apps not to exploit PhotoKit loopholes, store sensitive media in a container that doesn't use the iOS Photos library at all.
LinkGrow maintains its own AES-256-GCM encrypted database. No third-party app—no matter what permissions you grant it in iOS Settings—can ever query or view your LinkGrow files.
Safeguard your photos with LinkGrow
No accounts. Unbroken AES-256-GCM encryption. Plausible deniability.
Recommended Security Guides
View all guidesAre Hidden Photos Saved to iCloud? (The Real Truth)
If you enable iCloud Photos, your 'Hidden' album is synced to Apple servers by default. Here is how CloudKit syncing works, where your keys reside, and how to stop cloud exposure.
Calculator Photo Vault Apps: Are They Safe? (2026 Review)
Calculator photo lockers promise discreet camouflage, but our forensic teardowns of top App Store calculator apps revealed unencrypted media, invasive trackers, and forensic red flags.