implementation incorporates the concept of a per- donation privacy budget (quantified by the parameter epsilon), and sets a strict limit on the number of co...
https://www.apple.com/jp/privacy/docs/Differential_Privacy_Overview.pdf