What Your Digital Driver's License Shares

The wallet apps already spell out what leaves your phone when you enroll. Almost nobody reads those pages.

State of Surveillance

TL;DR: Adding your driver's license to Apple Wallet sends far more than a picture of your card to your state. Apple's own privacy overview says the issuing authority receives images of the front and back of your ID, your Live Photo or selfie, the analysis of your head movements but not the video itself, the data read from the PDF417 barcode on your ID, and a fraud score: "A single-digit value, used to help prevent fraud, that's based on your device use patterns, settings data, and information about your Apple Account" [1]. Apple's legal privacy page adds two things the support page leaves softer: your state "may share them with their third-party identity verification service provider", and the state's handling of your enrollment photo "may allow them to use facial recognition technology" [2]. Apple itself holds a subset of your barcode data, your selfie, and the video of your head movements while the state decides, then deletes them [1]. The good news: your presentment history stays on your phone, and neither Apple nor the state can see where or when you used it [1]. The catch: none of this makes it a REAL ID. Keep the plastic card [3].

Three Different Things Called a Digital ID

Before you can answer what any of this shares, you have to pick which thing you are asking about. Three separate systems hide behind the phrase digital driver's license, and the answers differ.

A state-issued mobile driver's license in a wallet app. This is the one most people mean. Apple requires an iPhone 8 or later or an Apple Watch Series 4 or later, Face ID or Touch ID turned on, two-factor authentication on the Apple Account, "A license or ID from a participating US state or territory", and a device region set to the United States [4]. A license or ID "can be added to one iPhone and Apple Watch per Apple Account at a time" [4]. The state makes the call: "The issuing authority, not Apple, makes the decision to approve or deny your request to add your license or ID to Apple Wallet" [4].

Apple's Digital ID, built from a passport instead of a license. Apple announced this on November 12, 2025. "At launch, Digital ID acceptance will roll out first in beta at TSA checkpoints at more than 250 airports in the U.S." [5]. The point was to reach people without a compliant card: "Digital ID gives more people a way to create and present an ID in Apple Wallet even if they do not have a REAL ID-compliant driver’s license or state ID" [5]. It is not a passport substitute either: "Digital ID is not a replacement for a physical passport, and cannot be used for international travel and border crossing in lieu of a U.S. passport" [5].

An ID added through the issuing authority's own app. Apple documents this path and says the shared data goes to the state alone: "Apple doesn't have access to the shared data" [1]. So far it is not an option for US readers. Apple's legal page states that this feature "is available only in Japan" [2].

Underneath all of it is a standard, not a company. NIST explains that the credential itself is an ISO-defined mobile document, and the difference between products is in how it gets presented: "ISO/IEC 18013-5 is primarily focused on in-person presentation scenarios", while "ISO/IEC 18013-7 is a newer technical specification that builds on ISO/IEC 18013-5 and adds support for presenting an mDL over the internet" [6]. The 2024 NIST explainer on the same topic put it plainly: "They are underpinned by public key cryptography and work with biometric authentication" [7].

What Your State Actually Receives

This is the section nobody reads, and it should be the first one. Apple's privacy and security overview, published August 26, 2026, states: "The issuing authority receives only information they need to approve or deny adding your ID to Apple Wallet" [1]. The list that follows is five items [1]:

  • "Images of the front and back of your ID"
  • "Your Live Photo or selfie"
  • "Results of the analysis of the Live Photo or video of your head and facial movements, but not the video itself"
  • "Data read from the PDF417 barcode on your ID"
  • "A single-digit value, used to help prevent fraud, that's based on your device use patterns, settings data, and information about your Apple Account"

Apple adds a limit: "Aside from the data listed above, no other data from your device and no personal information about your Apple Account is shared with the issuing authority" [1].

Now the part the support page does not spell out. Apple's legal privacy page for Wallet IDs says: "Your identity card images are encrypted on device and sent to your government issuing authority, which may share them with their third-party identity verification service provider; Apple does not see or store images of your identity card" [2]. So your license photos can reach a contractor hired by the state. That contractor is the piece to ask your DMV about.

The same legal page describes what happens to your enrollment photo. Your device sends a still frame from your Live Photo to the state "to be compared against their image on file for the ID", and then: "Your government issuing authority will process this still frame photo in accordance with their privacy policies, which may allow them to use facial recognition technology" [2].

Enrollment is not always finished in the app. "In some cases, your government issuing authority may ask for more information or an in-person visit" [2]. And once your ID is in Wallet, the state keeps feeding Apple status updates: "your government issuing authority will periodically tell Apple whether your identity card is still valid" [2]. Apple says it never receives the underlying detail of those changes, such as your actual updated address.

What Apple Holds, and for How Long

Apple's support page is careful here, and the careful reading matters. During setup and verification, "Apple has temporary access to the following information" [1]:

  • "A subset of data from the PDF417 barcode on your ID (name, address, date of birth)"
  • "Your Live Photo or selfie"
  • "The video of your head and facial movements"

The deletion promises are specific. "The subset of data from your ID is deleted from Apple servers right after sending your request to the issuing authority." Your selfie and movement video "are deleted from Apple servers shortly after the issuing authority approves or denies adding your ID to Apple Wallet" [1]. If you consent to a human review of your video, "your selfie and video will be kept for up to 30 days", and Apple says "The video and photo aren't used as training data, only for review to inform the process" [1].

There is one more input to that fraud-prevention pipeline, and it only appears on the legal page. Alongside your Apple Account details, your device use patterns and settings, and information about your Live Photo or head movements, Apple receives "device location at the time you attempt to add your state identity card (if you have Location Services enabled)" [2]. So the location your phone is sitting at during enrollment is part of the fraud signal, and it is "shared with Apple for fraud prevention" [2]. Apple then passes it on: "Apple will share fraud indicators based on this information with your government issuing authority for fraud prevention" [2].

What Apple keeps afterwards is a status flag, not your data: "Apple may continue to store information about the verification outcome, such as whether the identity information was successfully verified, to help support the feature and prevent fraud on underlying Apple platforms, but will not store the underlying identity information (such as the date of birth read from your barcode)" [2].

The card itself stays on the phone. Once provisioned, "the information reflected on your identity card is stored in an encrypted format that can be decrypted only using the Secure Enclave on your device" [2]. And the biometric check that unlocks it "occurs strictly on device and isn't sent to the issuing authority or Apple" [1].

What Google Says

Google Wallet is the other implementation worth reading closely, and the clearest public descriptions come from the states rather than Google. Georgia's Department of Driver Services says the service "doesn't collect, track, store who you present your ID to" [8]. Georgia also says identity verification includes "image comparisons and validating data on-file with Georgia DDS" [8], and that adding an ID to Google Wallet requires a REAL ID [8].

California's DMV puts it more bluntly on its Google Wallet page: "Usage is not tracked, and no data leaves your device without your consent" [9]. The same page still walks you through the airport steps: "Turn Bluetooth on and hold the phone over the reader." Then: "TSA will take a picture to authenticate your identity" [9].

Read those claims narrowly. "Not tracked" describes the wallet's own record of your presentments. It does not describe what the reader on the other end does with your face once you have handed it over.

The practical constraints are the same on both platforms. Georgia requires Google Wallet on an Android device "shipped with software version 8.0 (Oreo) or higher", with Near-field Communication and Bluetooth enabled to present [8]. Georgia says the credential "may only be active on one phone and one paired watch at a time", and that a new phone means a fresh request that cancels the old one [8]. Georgia also says it is not charging an extra fee for the program [8]. Google Wallet's own page says a digital ID is "stored encrypted and only usable with your personal authentication", and that availability is "Available in most states at select TSA checkpoints" [10].

Who Sees Your Face at the Reader

The part that matters most happens after enrollment, at the reader. Apple's design puts the decision in your hands. Before presenting, you can review "The information being requested", "Who is requesting it", and "If the data is being retained" [3]. In an app, the consent screen shows "The information from your license or ID that the app is requesting", "The information that the app will store, and how long the app plans to store that information", and "The reason that the app is requesting this information" [3]. The channel itself is end-to-end encrypted: your device "will establish a direct, end-to-end encrypted channel with the identity reader and transmit the authorized information" [2].

Apple's Present menu also lets you pick how much goes out by default. The support page names three settings and their effects: with "Requested ID Information", "any requested information will be sent to the contactless reader and no additional consent is needed"; with "Age & ID Photo", any extra requests appear on screen first; with "With Review", "you'll see all of the information being requested on screen" [3].

At a checkpoint, the face check is real. TSA says it "uses facial comparison technology to verify the identity of travelers on a voluntary basis", and that digital IDs work at "more than 250 TSA checkpoints" [11].

At a shop or a bar, the design is supposed to be tighter. NIST describes a point-of-sale age check where the reader asks for "over-21?" and "The user’s mDL wallet responds with only the minimal attribute required (e.g., yes/no)" [6]. That is the promise of selective disclosure, which NIST described as the ability to "pick and choose which information from your driver’s license you want to share with third parties" [7]. Whether the reader in front of you honours it is a separate question from whether your phone offers it.

One more wrinkle worth knowing about, because it follows directly from the passport design. Apple's legal page warns that a Digital ID "will provide an indicator that it is an acceptable alternative to REAL ID", and that "Other third-party identity readers may also be able to request and receive this indicator." Then the sentence that should make you pause: "Because your Digital ID is created from your passport, when you present your Digital ID, the requesting party may be able to infer that you are a U.S. citizen" [2]. The credential you built from a passport tells the reader something a license would not.

On the other side of the trade, the wallet keeps its own books on your phone. Apple says you can "view past presentments, including when, where, and to whom you presented your identity card, and the specific information presented, by tapping on your identity card in Wallet", and that this record is generated by the device, with "neither Apple nor the digital identity card issuing authority know or keep a record of when, where, or to whom you present your identity card" [2]. Deleting the card from Wallet "will delete all presentment history from your device" [2].

One reliability caveat from NIST: for revoked credentials, "some latency remains where invalid credentials may remain active for a short period of time after they are revoked" [6]. A revoked license is not instantly dead everywhere.

It Still Does Not Replace Your Plastic Card

Every one of these systems is a partial substitute, and the vendors say so. Apple: "ID in Wallet is not a replacement for a physical ID which may still be needed (e.g., by request of law enforcement)" [3]. California: law enforcement, state agencies and businesses do not yet accept the mobile license, so you keep carrying the physical card [9]. Georgia: law enforcement does not accept the digital version [8]. Google Wallet: "Travelers must present a physical ID if requested by TSA" [10]. TSA: "Travelers should always carry a physical and acceptable form of ID." [11]

One deadline is already on the calendar. TSA's participating-states page carries the notice: "Utah's mDL will no longer be accepted by TSA beginning Jan. 1, 2027" [11]. If you are in Utah and you built your airport routine around the phone version, that runway closes on New Year's Day.

And before you plan a trip, check that your checkpoint even takes it. Apple's own footnote says ID in Wallet "is accepted at select U.S. airports and TSA checkpoints (travelers should check if their airport accepts mobile ID before traveling and refer to airport checkpoint signage to confirm availability)" [3].

The Telemetry You Can Turn Off Today

There is one opt-out worth knowing before you enroll rather than after. When you add an ID through the Wallet app, you may be asked to share "select demographic data (such as age range or sex) and the apparent skin tone from your selfie" [1]. Apple's legal page describes the same collection more bluntly: "Apple will anonymously collect your age, sex, race / ethnicity (if available), and apparent skin tone from your driver’s license or state ID, along with the government issuing authority’s decision about whether to issue you an identity card for Wallet" [2].

It is protected by "differential privacy", and the collection window is bounded: "For 90 days after you add your ID to Apple Wallet, Apple will collect from your device the attributes that you've agreed to share", and "After 90 days, the data from your device is no longer available to Apple" [1].

The switch is on your phone, not on Apple's site: "Open the Settings app, then tap Privacy & Security. Tap Analytics & Improvements, then turn off Improve ID Verification" [1]. You can also review or change the consent there, and Apple's legal page adds one limitation: if you provision through the issuing authority's own app rather than Wallet, you cannot opt in to this program at all [2].

What to Do Before You Tap Add

  1. Read the consent sheet every single time. It names the requester, the exact fields, and whether the data is kept. If the sheet does not name the business standing in front of you, do not confirm.
  2. Turn off the fairness telemetry first. Settings, then Privacy & Security, then Analytics & Improvements, then Improve ID Verification. Do it before you enroll if you can, because the collection starts the moment you add the card.
  3. Set the Present menu to the least revealing option. Apple documents three settings, and you can change them at any time you present.
  4. Keep the plastic card in the bag. Every vendor and every federal rule in this story says the physical ID still gets asked for.
  5. Ask your state who its verification vendor is. Apple's legal page says the state may share your ID images with a third-party identity verification service provider. The state's own mDL privacy notice should name it.
  6. If you are in Utah, note January 1, 2027. That is when TSA stops accepting the state's mDL.
  7. Check whether your checkpoint takes it at all. Acceptance is at select airports and select businesses, not everywhere.

Sources

  1. Apple Support, IDs in Apple Wallet: privacy and security overview (published August 26, 2026)
  2. Apple, IDs in Wallet & Privacy (legal privacy page, December 12, 2025)
  3. Apple Support, Present your driver's license from Apple Wallet (published October 26, 2026)
  4. Apple Support, Add your driver's license to Apple Wallet (published October 26, 2026)
  5. Apple Newsroom, Apple introduces Digital ID, a new way to create and present an ID in Apple Wallet (November 12, 2025)
  6. NIST Cybersecurity Insights, Verifiable Digital Credential Presentment (June 30, 2026)
  7. NIST Cybersecurity Insights, Check Your Wallet? How Mobile Driver’s Licenses are Changing Online Transactions (May 22, 2024)
  8. Georgia Department of Driver Services, Digital ID in Google Wallet Frequently Asked Questions
  9. California Department of Motor Vehicles, Mobile driver's license in Google Wallet
  10. Google Wallet, Store Your Digital ID on Your Phone
  11. TSA, Participating States and Eligible Digital IDs

Published: October 29, 2026