They gave Apple authorization to access their phone (the phone is not Apple property) in order to copy certain things into the cloud.
They uploaded new software and downloaded data they were not authorized to download without getting permission first.
I'm sure there is some cover your ass clause in the EULA that tries to protect them when they (accidentally or on purpose) violate the CFAA, but, in this case, they pretty clearly did things that exceeded their authorization.
The relevant part of the CFAA is a.1 (I removed the bits that are irrelevant):
> (a) Whoever—
> (1) having knowingly accessed a computer without authorization or exceeding authorized access, and by means of such conduct having obtained ... restricted data, as defined in ... causes to be communicated, delivered, or transmitted, or attempts to communicate, deliver, transmit or cause to be communicated, delivered, or transmitted the same to any person not entitled to receive it ...
https://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act
They uploaded new software and downloaded data they were not authorized to download without getting permission first.
I'm sure there is some cover your ass clause in the EULA that tries to protect them when they (accidentally or on purpose) violate the CFAA, but, in this case, they pretty clearly did things that exceeded their authorization.
The relevant part of the CFAA is a.1 (I removed the bits that are irrelevant):
> (a) Whoever—
> (1) having knowingly accessed a computer without authorization or exceeding authorized access, and by means of such conduct having obtained ... restricted data, as defined in ... causes to be communicated, delivered, or transmitted, or attempts to communicate, deliver, transmit or cause to be communicated, delivered, or transmitted the same to any person not entitled to receive it ...
https://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act