Comment by dwaite

> They do something like this, using homomorphic encryption. Whatever they do, there is no doubt they incur serious performance hits.

Right, I've seen similar engineering efforts to target this sort of functionality fail because of the computational cost and resulting latency. I'm curious to read the paper for the tradeoffs they made toward practicality at Apple's scale of users.