What data does the Carrier IQ daemon log from iPhones?

There has been little written technically about the Carrier IQ software on iPhones despite it being present on iOS 3, 4, and now iOS 5.

From what I can tell, the daemons vary depending on the firmware version of the device (as well as where the default log files lie):

• iOS 3: /usr/bin/IQAgent logs to /var/logs/IQAgent
• iOS 4: /usr/bin/awd_ice2 or /usr/bin/awd_ice3 logs to /var/wireless/Library/Logs/IQAgent
• iOS 5: /usr/bin/awd_ice2 or /usr/bin/awd_ice3 logs to /var/wireless/Library/Logs/awd

To avoid a huge effort to answer this - I've provided the iOS 3 and 4 information to illustrate the length these have been around but would be happy to get answers focused exclusively on the iPhone data collected under iOS 5. More general or detailed answers are always welcome, but I'll choose the best answer that covers iOS5 and:

1. Is personally identifiable or data associated with my unique device / serial number collected?
2. Does this collected data sync to my computer to iCloud?
3. Is some or all of the data transmitted over the air or WiFi directly to anyone other than Apple?

Since there are many variables, please try to provide the carrier you have, the phone model as well as whether you opted in to send this diagnostic data. All reports I have seen is this software only runs when you opt in and cleans up / stops reporting as soon as you opt out.

Solution 1:

It appears that very little, and it can be completely disabled.

Carrier IQ, the now infamous “rootkit” or “keylogger”, is not just for Android, Symbian, BlackBerry, and even webOS. In fact, up through and including iOS 5, Apple has included a copy of Carrier IQ on the iPhone. However, it does appears to be disabled along with diagnostics enabled on iOS 5; older versions may send back information in more cases. Because of that, if you want to disable Carrier IQ on your iOS 5 device, turning off “Diagnostics and Usage” in Settings appears to be enough.

http://blog.chpwn.com/post/13572216737

Solution 2:

In iOS 5 /usr/bin/awd_ice3 (I don't have awd_ice2) contains some paths and then a lot of unreadable data (opened as text). Maybe it's encrypted/compressed? /var/wireless/Library/Logs/awd is empty as it should be as I have not enabled sending Diagnostics and usage (will test and update in a few days).

My iPhone 4 was bought in Italy and the carrier is 3 (H3G).