Sometime in February last year, without any announcement that most people noticed, a setting on millions of British iPhones quietly stopped being available. Advanced Data Protection, the feature that let Apple users encrypt their iCloud backups so thoroughly that even Apple could not read them, vanished for UK customers. The reason surfaced only later. The Home Office had issued a technical capability notice demanding a route into that encrypted data, and Apple's answer was to switch the protection off rather than build the hole the government wanted. Eighteen months on, having narrowed its demand to UK users alone after a diplomatic row with Washington, the Home Office is facing Apple again, this time at the Investigatory Powers Tribunal, which has already rejected the government's attempt to hold the hearing in private.

The technology press has covered this as a story about phones. It is really a story about what the state believes it is owed, and that question reaches well beyond Cupertino's encryption architecture into the heart of how the NHS is trying to run itself.

Consider what the government is asking the public to accept on two fronts at once. On one, the Home Office argues that a backdoor limited to UK law enforcement, used only for terrorism, serious crime and child abuse investigations, poses no meaningful risk to ordinary users. Cryptographers dispute this on technical grounds; there is no known way to build access that only the intended authority can use. On the other front, DHSC and NHS leadership are asking patients to trust the state with something considerably more revealing than an iCloud backup: full medical histories, moving through the Federated Data Platform, feeding ambient voice tools now being trialled in consultation rooms, accessible in principle to an expanding list of NHS bodies, commissioners and technology partners including Palantir.

The contradiction is not hypothetical. Confidence in NHS data handling took a real hit after the 2024 ransomware attack on Synnovis, the pathology partnership serving several London hospitals, which forced the cancellation of operations and blood transfusions for weeks and exposed how little resilience sat behind systems the public assumed were secure. The National Data Opt-out exists precisely because successive governments have struggled to convince patients that sharing their records will not eventually mean sharing them somewhere they never agreed to. Every time ministers argue, in a different department, that weakening encryption is a manageable trade-off for security, they weaken their own case for why patients should extend more trust to the NHS's data infrastructure rather than less.

This matters practically for NHS leaders trying to expand the FDP's reach into more integrated care systems, and for health-tech firms whose products depend on patients believing their data stays where they are told it will. Public willingness to share health information for research and care coordination has never been unconditional. It rests on a belief, increasingly hard to sustain, that the state treats sensitive personal data with more restraint than convenience allows. A ruling against Apple would not alter NHS data law directly, but it would establish that a British court accepts the principle that selective, secure backdoors are achievable and proportionate. Any such ruling becomes instantly available as precedent the next time a minister or a Federated Data Platform contractor wants to justify wider access to clinical records under the language of efficiency or safety.

None of this means the Apple case will determine NHS policy. It means the government is currently arguing two incompatible positions to two different audiences, and healthcare leaders trying to build public consent for data-driven care would do well to notice which argument wins. If ministers cannot convince the courts that a backdoor into an iPhone is safe, they will find it harder still to convince a patient that a backdoor into their medical record, however narrowly framed, is nothing to worry about.