April 10, 2026
Your lock screen is snitching
FBI used iPhone notification data to retrieve deleted Signal messages
Deleted Signal texts “rise from the dead,” and people are freaking out
TLDR: FBI reportedly read deleted Signal chats by pulling message previews stored in an iPhone’s notification logs. Commenters are split between confusion and “well, obviously,” reminding that encryption doesn’t protect what’s already shown on your screen and calling for stricter Signal settings—especially turning off message previews—to keep lock screens from oversharing.
Plot twist: the FBI didn’t crack Signal’s encryption — they reportedly grabbed message previews that your iPhone quietly kept in its notification logs. A court exhibit says only incoming Signal messages were recovered, even after the app was deleted, because previews were still showing. Translation: if your lock screen shows message text, your lock screen might be a snitch.
That set off a comment-section meltdown. One camp, echoing frizlab, asked, “Aren’t notifications supposed to be encrypted?” Others clapped back with the day’s most repeated mantra: end‑to‑end encryption protects messages in transit, not what pops up on your screen. As i_am_proteus put it, nothing saves you “before encryption or after decryption.” Meanwhile, chasil voiced the collective panic: “How can I see this notification history?” and lenerdenator demanded stricter group chat controls so admins can force no‑preview rules for sensitive convos.
Amid the drama, practicals surfaced: Apple and Signal didn’t comment; the phone’s exact state is unknown; investigators may have pulled data from a backup using off‑the‑shelf forensics. Folks also noticed Apple just tweaked how it checks push notification tokens in the latest iOS — timing that has eyebrows up, if not fingers pointed. The vibe? Shock, snark, and a new meme: “Delete doesn’t mean delete — it means ‘deleted-ish.’” The crowd’s loudest takeaway: turn off message previews and stop letting your notifications overshare. Read 404 Media’s report here and the extra thread here.
Key Points
- •FBI recovered content of incoming Signal messages from an iPhone’s internal notification storage, even after Signal was deleted.
- •The case emerged during a Texas trial involving alleged vandalism at ICE’s Prairieland Detention Facility; details appeared in Exhibit 158.
- •Signal’s notification content preview setting was apparently enabled on the device, allowing message content to be stored and later accessed.
- •Apple and Signal did not comment on notification handling; exact technical method remains unclear, with iPhone security states (BFU/AFU) noted as factors.
- •Apple recently changed push token validation in iOS 26.4; data may have been extracted via a device backup and forensic tools exploiting iOS vulnerabilities.