What is clipboard leakage in mobile security, and what specific iOS version added a user-visible warning banner for apps reading the clipboard without user action?

• A.Clipboard leakage is closed off by platform sandboxing on both systems: a pasteboard read is scoped to the process that wrote the item (UIPasteboard hands back nil to a different bundle identifier), leaving cross-app harvesting impossible without an explicit share extension. The banner some users report belongs to the Handoff subsystem, not to clipboard access.
• B.Clipboard leakage occurs when sensitive data (passwords copied from a password manager, cryptocurrency wallet addresses, 2FA codes) is read from the clipboard by background apps or malicious apps; iOS 14 introduced a banner notification ("[App] pasted from [source]") that appears when an app accesses clipboard content without a user-initiated paste action.
• C.Android alone surfaces a clipboard warning: the Android 12 toast names the reading package, while iOS leaves pasteboard access silent (Apple treats the pasteboard like a user-initiated surface, outside the privacy nutrition label). A developer targeting iPhone has no platform notification to rely on, leaving in-app messaging the single way to tell a user that a password was read.