
Researcher discovers hard-coded list in iOS that prevents autocomplete for sensitive, political, and drug-related terms
Independent researcher Derik Kauffman discovered a 'grey list' in Apple's iOS containing over 100,000 words and phrases that the predictive text engine refuses to autocomplete, including politically sensitive terms, drug references, and specific names.
AI-generated summary
Apple uses predictive text algorithms to assist users in typing. The company maintains that these measures are intended to prevent the suggestion of inappropriate or offensive content.
“Australia is a very bad place to question your sexuality on MDMA with NSA spies” might be a text you would wish to send to your friends, if you have had an extraordinarily complicated night out in Sydney.
But your iPhone won’t help you spell any of it if you try to swipe-type it – that is, by gliding a finger across a keyboard as opposed to pecking out a word.
New research shows that Apple has a “grey list” of more than 100,000 words and phrases that it has restricted from being completed by its predictive text.
So if a user wishes to type phrases such as “Dictator Trump”, “NSA spies” or, surprisingly, “Australia is a very bad place”, “question your sexuality” or “on MDMA”, they will have to spell them out.
Apple’s predictive text will not suggest these words. And, if a user attempts to swipe-type them, they will often stumble, changing “United Ireland” to “United Iceland”, for example, or “Tibetan independence” to “Tibetan independences”.
The “grey list” was discovered by the independent researcher Derik Kauffman, whose other projects include using AI to find errors in scientific papers. After noticing that he had problems typing certain phrases – but not others – on his iPhone, Kauffman was able to unearth a table containing the list, encoded in Apple’s operating system.
The list he found includes some unsurprising words and phrases. Apple’s iPhone will not autocomplete references to drugs, sexual acts and, perhaps in the spirit of corporate protection, “iMessage isn’t working”.
But it also includes possibly politically charged phrases, which Kauffman described to Reuters as a “light-touch form of censorship”. Among these are “Trayvon Martin”, the name of the Black teenager shot in Florida in 2012, “Kashmir dispute”, “Muslim extremist” and “male chauvinist pig”.
In Hebrew, Apple will not autocomplete the phrase “the occupied territories”. In Arabic, it will not autocomplete the phrase “the Hamas movement”.
The list is one more glimpse into the dark bowels of how autocorrect – the chirpy keyboard partner that helps you look more educated to your loved ones – actually works.
The technology has taken many forms. In its earliest version, Unix, an operating system, would look up each word a user typed against a table of words, to determine if this word was spelled correctly.
This evolved into n-grams, a tool which allows an operating system to statistically predict what words might come next, based on the words before it. These form the basis of Apple’s familiar autocorrect, which was known to change expletives into prudish alternatives: “fork” and “ducking”, among other gaffes.
Last year, Apple unveiled a new autocorrect – a “transformer-based” system that was more akin to an LLM. Reddit sleuths saw this as a possible reason behind a spate of avant-garde spelling suggestions their iPhones made last year.
This hard-coded list illuminates one longstanding mystery behind the world’s spelling coach. Others remain, such as a brief glitch in which users of the dictation feature saw the name “Trump” flash across their screen when they spoke the word “racist” into their iPhones – which Apple quickly remedied.
Apple said that it designed its keyboard to avoid offering inappropriate or offensive predictive suggestions. It said that iPhone users could always type out specific words or phrases, and override predictive text suggestions to achieve their desired meaning.

Research by Vals finds open-weight AI models now nearly match closed frontier models in simulated network hacking, with DeepSeek completing 73% of tasks versus OpenAI's Daybreak at 81%, at a fraction of the cost, potentially rendering gated-access strategies moot.

The European Commission has accused TikTok of breaching the Digital Services Act over its For You page recommendation system, warning that endless exposure to content about sadness, isolation, or body image can harm users' mental health. TikTok refuted the claims, calling them fundamentally inaccurate. If confirmed, ByteDance could face fines of up to 6% of annual global revenue.

More than 100 activists broke into a Microsoft data center construction site in Amsterdam on Friday, climbing cranes and hanging balloons as police stood by, kicking off two days of planned protests in 16 countries demanding a pause in major AI data center construction over electricity, water, and environmental concerns.

AI companies and data brokers are aggressively purchasing internal corporate workflows, emails, and documents to train AI models. This emerging industry faces backlash over privacy risks and the ethical implications of using employee data to automate future jobs.

The European Commission has charged TikTok for failing to protect users' mental health, alleging its algorithm promotes addictive, repetitive content that exacerbates eating disorders and anxiety, violating the Digital Services Act.

Tanzanian farmers report that government digital platforms M-Kilimo and e-Kilimo suffer from poor accessibility, lack of training, and delayed information, despite high registration figures. Experts urge a shift from registration metrics to measuring actual impact.