App Store Now Rejecting Apps Using Third-Party SDKs That Collect User Data Without Consent

iOS 14 has brought several new privacy features, and there are more to come with App Tracking Transparency -- which will let users opt out of being tracked by apps. From a report: As the launch of this new option approaches, Apple has begun to reject apps using third-party SDKs that collect user data without consent. Developers can implement some SDKs that help them track users by a method called "device fingerprinting," which uses multiple attributes such as the device model, IP address, and other data to identify a person across the internet. Apps often use this data for deep analysis about their audience or to sell advertisements.

While tracking the user is not exactly illegal, Apple wants to put an end to apps that do this without explicit consent. As noted by analyst Eric Seufert, the company is now rejecting any apps using the Adjust SDK, which is one of those SDKs that provides device fingerprinting. There would be no problem for these developers if the Adjust SDK complied with Apple's new privacy guidelines, but this doesn't seem to be the case. Seufert detailed to 9to5Mac that the Adjust SDK not only doesn't have an option for users to opt out of being tracked, but has also been suggesting alternatives for developers to continue tracking users once Apple enables App Tracking Transparency. Snap has explored how it can circumvent new privacy rules for iPhones, Financial Times reported Friday.

Good

[martynhare]

Then people can choose. For me, that means consenting to telemetry for improving software at a technical level while rejecting advertiser-related personalisation outright. For others, that might mean rejecting all data collection which isn't required for the functionality they use.

Re:Good

[Anubis IV]

Really, you could’ve stopped with just your subject line. This is how this sort of stuff should’ve been from the start, but—much like Internet protocols—we were collectively naive and didn’t think through things enough to realize that bad actors would inevitably misuse these tools.

I’m glad to see things are finally functioning as they should have been this entire time. It’s high time abusive business models built on the wanton collection of personal data are rendered unusable.

Privacy is a core requirement

[oblom]

Funny how even 5 years "privacy" concerns were mostly shrugged off. Apple is truly visionary for making it a core requirement. The ship of public opinion is slowly turning around.

Re:

[guruevi]

I'm not sure if the ship of public opinion is turning around, the majority of devices sold are still Android and most people will have Facebook or Twitter on their phone.

Re: Privacy is a core requirement

[cantsleep]

I can't tell if this is meant to be sarcastic or not.

Re: Privacy is a core requirement

[cantsleep]

"Visionary" would be if they solved these problems before they happened. "Responsible" would be if they solved them right after they started seeing bad actor apps mine people's name/number/contacts 10 years ago. Doing this now is about saving face, (and possibly closing door on competition). Treating your customers with respect is considered bare minimum in my book.

Re: Privacy is a core requirement

[Dixie_Flatline]

You're not wrong, but we can also see that virtually any step by Apple is considered an assault by other tech companies. Want to make *consent* part of tracking? Facebook says that you're a monopoly being MEAN. I think Apple ends up having to tread slightly more carefully because of the possible legal repercussions.

And Google is in the tightest spot. Restricting tracking or even asking for consent is wildly uncompetitive if they don't very explicitly show that they're taking the same steps with regards to themselves, because advertising is their stock in trade. They don't want to ask, because they want that info, but if they DO ask, Facebook really does have a solid legal claim. (I do not feel sympathy for anyone here, but it's understandable why everything is moving so slowly.)

Paywall

[retiredJan]

The second link goes to the FT paywall but via the first link you can get a alternate source https://www.adjust.com/blog/at... [adjust.com]

Excellent!

[Daimaou]

No more shit SDKs from Google and Facebook on my phone.

How about 1st Party?

[Wolfier]

So Apps using Apple's SDK would be exempt? What's the deal here, Apple not following their own rules again?

Re:

[shmlco]

In this case a "1st Party" SDK would be that created by the app itself, and each app now has to disclose user tracking data. The issue is that some apps install SDKs created by third-parties that are doing undisclosed user tracking.

Re:

[Actually, I do RTFA]

1st party SDKs are controlled via the OS's "Settings - Privacy" menu. Show me how I disable the Google SDK's telemetry/spying across all apps on my phone in one spot and we can talk about parity.

3DS 2.0 and device fingerprinting?

[javacowboy]

3DS 2.0 (3D-Secure) is an online purchasing authentication protocol mandated by the EU. It's especially important for smaller merchants because it reverses the liability of contested transactions from the merchant bank to the customer bank because the customer has given explicit permission.

1.0 largely failed to get traction because users had to enter their passwords for every single transaction, leading to large scale abandonment of transactions.

2.0 address this through a mechanism called frictionless, whi

And this is why App Store MUST BE OPEN!

[tlhIngan]

See, Apple is controlling the App Store by rejecting apps arbitrarily for using 3rd party libraries. This evil monopolistic practice must be stopped and developers must be free to put their apps on iPhones without fear that Apple will reject their applications and kill their livelihoods.

It should be obvious that Apple, and thus Google too, must not be allowed to control the app marketplace because of these evils.

Oh yeah, and we want the 30% back too.

Signed, Epic Games, Coalition for App Fairness, Facebook,