According to researchers, the location tracking system that helps you find Apple devices could also reveal your identity.

Offline Finding lets you locate Apple devices even when they’re not connected to the internet. Apple has said the app protects user privacy, but reported security vulnerabilities in the software show that anonymity can be hard to come by on the internet. According to a recent paper published by researchers at the Technical University of Darmstadt in Germany, hackers could gain unauthorized access to your location history from the past seven days and correlate it with your identity.

“What this really shows us is that nothing is ever 100% secure, and even after Apple patches, attackers will eventually find new vulnerabilities to exploit,” Jason Glassberg, co-founder of cybersecurity firm Casaba Security, said in an email interview. “The bigger issue here is that user privacy can never be guaranteed, and people need to shift their mindset from the idea of being ‘private’ to the reality of simply being ‘less exploited.’”

The Darmstadt team concluded that "the overall design meets Apple's specific goals" for privacy, but they discovered two vulnerabilities "that appear to fall outside Apple's threat model" and could have serious consequences.