Apple can now delete iCloud data that goes over your storage limit

The change

On September 14, 2026, Apple published a new version of its iCloud Terms and Conditions, replacing the version from September 2025. Most of the update renames terms and tidies wording. One new sentence stands out because it changes what can happen to your files.

The terms already said that going over your iCloud storage limit could stop backups, block new documents, and stop new email from arriving. The new version adds: "You agree that when you are over your iCloud storage limit, Apple may, upon 30 days' notice, delete any stored data that exceeds your storage limit." Venpo flagged the change on September 15, and the redline is on the public change page.

What changed

• Deleting data over the limit. Being over your storage limit used to mean iCloud stopped accepting new data. Apple can now also delete stored data that exceeds the limit, after 30 days' notice.

• Accepting updates. A new sentence says: "If you do not agree to updates to this Agreement, you may lose access to the Service."

• Taxes and levies. Apple can now add levies as well as taxes to iCloud+ plans, and pass them on wherever a country or region taxes or levies iCloud storage. This rule used to appear only for Brazil.

• Apple Intelligence in iCloud+. iCloud+ now lists Apple Intelligence as a feature, and some of its services "may be subject to usage limits."

• Scope. The agreement now says it governs the use of your Apple Account as well as iCloud itself.

From "you can't add more" to "we may delete"

Running out of iCloud storage used to be an inconvenience. Backups stopped, new photos stayed on the phone, and new email bounced until you freed up space or paid for more. Nothing you had already stored was at risk because of the limit itself.

The new sentence changes that. If you stay over the limit, Apple may delete stored data after giving 30 days' notice. The terms do not say which data counts as the part over the limit, or in what order it would be removed. That is left open, and the practical safeguard is the notice itself: an email or message that is easy to miss among other storage warnings.

This sits next to rules that were already in the terms. Apple could already delete backups for a device that has not backed up to iCloud in 180 days, and Apple's storage help page notes that when you are over the limit, photos you delete skip the Recently Deleted album and cannot be recovered.

What still protects you

Several protections remain. The deletion rule requires 30 days' notice. Apple still commits to 30 days' advance notice of any material adverse change to the service or the agreement, with limited exceptions. Paid iCloud+ subscribers are protected from material adverse changes until the end of their current paid term, again with limited exceptions, and can cancel with a pro rata refund if such a change happens.

The update also adds a few improvements. Users in Austria, Germany, Korea, and Poland get new notice and, in some cases, consent rights before a price increase. Custom email domains now allow "at least three" addresses per person instead of "up to three." And Private Relay is no longer described as a possible beta feature.

Why this matters

For many small companies, work data ends up in personal iCloud accounts without anyone deciding it should. Photos of whiteboards and receipts, scanned contracts, notes, voice memos, and full backups of phones used for work all count against someone's personal storage. When that storage fills up, the new rule means the fix is no longer optional forever.

It is also a reminder that storage limits are becoming enforcement points across vendors. Deletion and retention rules change in the fine print, as we saw when Perplexity dropped its 30-day deletion timeline, and account consequences tied to billing and usage keep growing, as when Google Cloud added new triggers for suspension. These are the vendor legal changes that are easy to miss.

Potential impact

For a company whose people use Apple devices for work, the update raises four practical questions:

• Which work files, photos, or phone backups live in employees' personal iCloud accounts rather than company systems?

• Is anyone on the team already over their iCloud storage limit and ignoring the warnings?

• Does your policy say where work data should be stored, so it does not depend on a personal storage plan?

• Who would notice a 30-day deletion notice if it went to a personal email address?

Keeping track of rules like these across every vendor is what monitoring vendor terms of service is for.

How Venpo detected it

Venpo monitors Apple's legal pages as part of continuous vendor risk monitoring. On September 15, the day after the new iCloud terms were posted, it flagged the update and separated the deletion rule and the other substantive edits from the large number of renamed terms and updated links. The full redline is on the iCloud change page, and every monitored Apple document is listed on the Apple vendor profile.

Business outcome

Teams that track Apple got a plain-English summary the next day, with the new deletion sentence quoted exactly. That leaves time to move work data out of personal iCloud accounts, check who is over their limit, and make sure storage warnings reach someone who will act on them. The alternative is discovering the rule after the files are gone.

Key takeaway

One sentence turned iCloud's storage limit from a wall into a deadline: stay over it, and after 30 days' notice Apple may delete what does not fit. Small sentences like this are exactly what gets lost between product updates, which is why automated monitoring catches what an annual review would not.