Apple's iCloud Private Relay is a useful privacy feature. It is also one of the most frequently misunderstood privacy tools on the iPhone — and the gap between what people assume it does and what it actually does is where a lot of real exposure lives.
Private Relay routes Safari web browsing through two separate internet relays, so that no single party can see both your IP address and what you're browsing. Apple sees your IP but not your destination. The relay operator sees your destination but not your IP. For Safari browsing, this is a meaningful privacy improvement.
That is roughly where its coverage ends.
Non-Safari traffic. Private Relay is a Safari-specific feature. Every other app on your iPhone — Maps, Mail, third-party browsers, social apps, shopping apps, news readers — communicates outside of Private Relay's scope. Those apps send their traffic through your regular internet connection, with your real IP address visible to every server they contact.
Chrome and other browsers. Private Relay does not apply to Chrome, Firefox, or any browser other than Safari. If you use Chrome on your iPhone, Private Relay is not active for that traffic.
Phishing and malware protection. Private Relay obscures your IP in Safari. It does not analyze the destinations you're connecting to, does not classify domains for malicious content, and does not block phishing links — in Safari or anywhere else.
Tracker calls from apps. Ad networks and data brokers receive direct connections from apps that have nothing to do with Safari. Private Relay does not intercept those calls.
Public Wi-Fi threats. Private Relay improves IP privacy on Safari. It is not designed as a public Wi-Fi security layer — it does not encrypt all device traffic the way a VPN tunnel does.
A user with iCloud Private Relay enabled, using Chrome, opening a news app, and connecting to a coffee shop Wi-Fi has:
This is not a criticism of Private Relay — it is a description of what it is. Apple documents these boundaries. The problem is that the feature's name and its placement in iCloud settings lead many users to believe they have broader coverage than they do.
Casper's Cloak is designed to cover the traffic Private Relay does not reach. It combines DNS-level filtering and system-wide ad and tracker blocking with a WireGuard-encrypted tunnel that protects all device traffic — not just Safari, not just one browser — across every app, on every network including public Wi-Fi.
The AI threat detection layer runs real-time analysis on network connections to catch phishing domains and malware infrastructure, including zero-day threats that haven't appeared on any static blocklist. This works across all apps, not just the browser layer Private Relay touches.
Private Relay and Casper's Cloak are not competing for the same job. Private Relay does one thing well inside Safari. Casper covers the rest of the device.