Hoodik vs iCloud Drive: The Always-Encrypted iCloud Alternative

Apple takes privacy seriously and says so more loudly than any of its competitors. On iCloud Drive specifically, the picture is more complicated than the marketing suggests, and one event in 2026 showed exactly why.

The Default Is Not End-to-End Encrypted

iCloud protects fifteen data categories with end-to-end encryption no matter what you do: Keychain passwords, Health data, Home data, payment information, and others. Your files in iCloud Drive are not on that list.

By default, iCloud Drive uses what Apple calls standard data protection. Files are encrypted in transit and on Apple's servers, and Apple holds the keys. That means Apple can decrypt your files, and does when served valid legal process. Apple's own transparency reports document how often.

Advanced Data Protection, introduced at the end of 2022, moves iCloud Drive into end-to-end encryption. It works well and it is the right feature. It is also opt-in, buried a few taps into Settings, and it requires you to set up an account recovery method first because Apple can no longer reset it for you. Adoption has stayed low, so the overwhelming majority of iCloud Drive files sit in a state where Apple holds the keys.

Hoodik has no such setting because it has no other mode. Files are encrypted in the browser or in the app before upload, with a key wrapped for your account. The server stores ciphertext, file names included. There is no default to get wrong and no switch to forget.

The UK Showed What a Setting Is Worth

In February 2026 the UK Home Office issued Apple a technical capability notice under the Investigatory Powers Act, seeking access to encrypted iCloud data. Apple's answer was to refuse the backdoor and remove the feature instead: Advanced Data Protection stopped being offered to new users in the United Kingdom, and existing UK users were told they would need to turn it off. As of this writing, Apple's support documentation still states it cannot offer ADP to new UK users. The demand was reported withdrawn after months of negotiation between the UK and US governments, and the feature is expected back.

Read that sequence again, because the outcome matters less than the mechanism. A government asked, and the encryption on millions of accounts was switched off from the outside. Nobody's threat model was updated by the user. Apple behaved about as well as a company in its position can, and the protection still went away for an entire country.

Hoodik cannot be turned off this way. The encryption is not a server-side feature flag; it is the client encrypting before anything is sent. On a self-hosted instance there is no vendor in the loop at all. On Hoodik Cloud we run the instance and still cannot decrypt your files, so a demand aimed at us produces ciphertext. The code that does the encrypting is public, so a change to it is visible.

Where iCloud Drive Wins

Integration. Desktop and Documents folders syncing automatically, Photos across every device, Files.app, Handoff, shared albums, Find My. It is invisible in the way good infrastructure should be, and Hoodik is a distinct app you deliberately open.

Price. Around $0.99/month for 50 GB and $9.99/month for 2 TB, shareable with Family Sharing. Hoodik Cloud costs more per gigabyte because it provisions a dedicated instance rather than space on a shared system.

Photos. iCloud Photos with on-device recognition, Memories, and shared libraries has no counterpart in Hoodik, which stores your photos as encrypted files.

Recovery. Apple can help you back into a standard-protection account. With ADP on, and with Hoodik, losing your credentials and recovery material means losing the data. That is the honest cost of the provider not holding a key.

Where Hoodik Wins

Encryption is unconditional and it covers metadata. No opt-in, no country-level exceptions, no default that leaves your files readable by the provider.

It works off Apple's platforms. There is no iCloud Drive app for Android, and the Windows client is limited. Hoodik has iOS, Android, and macOS apps plus a full web client, so a household running a mix of devices gets the same storage everywhere.

The cryptography is post-quantum. Apple shipped PQ3 for iMessage, which was good work, and iCloud Drive did not get it. Hoodik wraps every file key with a hybrid of X25519 and ML-KEM-768, the key exchange NIST standardized for the post-quantum era. Login uses OPAQUE, so your password never leaves your device.

Search stays private. A BERT tokenizer runs on the client, each token is hashed with SHA256, and only hashes reach the server. You can search across every file from any device without the server learning the query.

You can verify it and you can leave. Hoodik's server is source-available Rust. Run it on your own hardware, or let us run it and export the whole instance to your own server whenever you want. iCloud is Apple's, on Apple's terms, forever.

Who Should Use Which

If every device you own has an Apple logo and you want storage you never think about, iCloud Drive is excellent and you should turn Advanced Data Protection on today. That single switch closes most of the gap this page describes, and it is free.

Hoodik is the better answer when you want encryption that does not depend on a setting, a jurisdiction, or a company's ability to keep saying no. It is also the better answer when your devices are not all Apple's, or when you want to read the code that protects your files.

Hoodik Cloud is €9/month for 100 GB or €19/month for 500 GB, in the EU or US, with a 14-day trial and an export that runs as a self-hosted instance whenever you want it to.