Your Photo Widget Is Showing People Your Photos

Because the widget draws from your whole library, not from anything you chose. Featured Photos and Memories pick automatically, and the result renders on a screen that’s visible to anyone sitting across from you, without your phone being unlocked or an app being opened.

What the widget is pulling from

A Photos widget in its default state is a slideshow of your library selected by an algorithm optimising for pleasant surprises, not for discretion.

That’s usually charming. It stops being charming when the algorithm decides a photo from a relationship that ended, a screenshot of a document, or a picture that was only ever meant for one person deserves a turn on your home screen. The widget doesn’t know which category anything falls into, and it refreshes on its own schedule, so you find out at the same moment everyone else does.

The fix is to take the choice away from it: long-press the widget, edit it, and point it at a specific album you built for the purpose.

Everywhere else your library shows up uninvited

The widget is the visible one. Photos surface in several other places that don’t require you to open the Photos app.

Where	What triggers it
Lock screen wallpaper shuffle	A photo-based wallpaper set to rotate through your library
Memories notifications	Automatic collections resurfacing on their own schedule
Share sheet recents	Sending anything, which shows a strip of your latest images
Spotlight and search results	Searching your phone for something unrelated

Each of these is a small leak with the same shape: your library is one glance away from someone else, at a moment you didn’t choose. We covered the resurfacing problem specifically in why your iPhone keeps resurfacing private photos.

What to change today

• Point the widget at a curated album rather than Featured Photos, or remove the widget.
• Stop wallpaper shuffling through the full library, or pick from that same curated album.
• Turn off Memories notifications if photos have ever surfaced at an awkward moment.
• Check what has photo access. Apps granted the full library can read all of it, as we went through in which apps can access your photos.

The part settings cannot fix

All of the above narrows what the system shows. None of it changes the underlying fact that the sensitive photos are still sitting in the same library as everything else, one swipe from anyone holding your unlocked phone.

That’s the gap Arca closes. Photos you move into it are encrypted individually with AES-256-GCM, with the key derived from your PIN using Argon2id, held in the app’s container on your device with no account and no server. Nothing in the vault can appear in a widget, a Memory, or a share sheet strip, because the system photo library no longer holds it. The full model is on our security page.

The limits, plainly. A vault protects what you actually move into it, not what stays in your camera roll. It protects files at rest, not a vault open in front of someone. And with no server behind it, nothing is recoverable if you forget your PIN.

Get Arca on the App Store to keep private photos out of your library, and out of whatever your phone decides to display next.