Watchdog ponders why Apple doesn't apply its strict app tracking rules to itself
(2025/02/14)
- Reference: 1739525288
- News link: https://www.theregister.co.uk/2025/02/14/apple_app_tracking_probe/
- Source link:
Apple is feeling the heat over its acclaimed iPhone privacy policy after a German regulator's review of iOS tracking consent alleged that the tech giant exempted itself from the rules it enforces on third-party developers.
In a preliminary legal assessment of Apple's App Tracking Transparency framework (ATTF), Germany's competition watchdog [1]said the "strict requirements under the ATTF only apply to third-party app providers, not to Apple itself."
It is a common tactic to track users across devices – sometimes by a free app dev trying to get paid a premium for "profiled" ads, sometimes by a technical vendor selling services to the ad industry or a content provider that traditionally would have run print ads, like a [2]newspaper . Whether or not users know it is happening and agree to it is probably a better question.
Brit publishers beg Apple not to hurt online ad revenue [3]READ MORE
Since 2021, when Apple set up the iOS ATTF, app devs have had to ask iPhone and iPad users for their consent before applications could track their activity across other apps such as Facebook. Facebook owner Meta had a problem with this, especially when a 2022 ATTF update began to preclude advertisers from using data across their own platforms. This practice is known as "first-party" tracking as opposed to "third-party" tracking.
As one programmatic ad news outlet [4]pointed out , Facebook was actually hit the hardest by the 2022 first-party rules because its software development kit (SDK) "plugged into so many outside apps and ... its attribution pixels [were] littered liberally across the web." This meant that when an iPhone user with the latest ATTF update was on Instagram, data could not be collected on what the user was doing on Facebook, and vice versa.
[5]
Meta was so worried about this that it chalked up a [6]$10 billion hole in potential ad sales to the move, with CFO Dave Wehner saying in a February [7]2022 earnings call [PDF] discussing its full-year 2021 results: "We believe the impact of iOS overall as a headwind on our business in 2022 is on the order of $10 billion."
[8]
[9]
Judging by what the Bundeskartellamt said of its preliminary findings, though, Apple's "comprehensive digital ecosystem" appears to suffer less degradation in cross-tracking.
The Federal Cartel Office claims that Apple's ATTF defines "tracking" in a way that only covers data processing for advertising purposes across companies – but that these "strict ... rules do not cover Apple's own practice of combining user data across its ecosystem – from its App Store, Apple ID and connected devices – and using them for advertising purposes."
[10]Brit competition watchdog takes aim at Google, Apple's mobile ecosystems
[11]Apple's interoperability efforts aren't meeting spirit or letter of EU law, advocacy groups argue
[12]British tribunal claim aims to take a bite out of Apple over App Store fees
[13]Apple hit with £3 billion claim of ripping off 40 million UK iCloud users
Additionally, it says the consent dialogues for Apple's apps differ "substantially" from those of third-party apps. The current design, particularly the wording of the dialogue for Apple's own apps, makes it "more likely that users will consent than that of the ATTF dialogue for third-party apps."
It also claims that people using third-party apps will see up to four consecutive consent prompts, while Apple apps receive only a "maximum of two," which do not properly explain that Apple's processing of user data across services constitutes first-party tracking.
[14]
Apple has been under extra scrutiny in Germany since April 2023, when the regulator determined that Apple had "cross-market significance for competition," meaning it is now subject to "extended abuse control." Apple appealed to the Federal Court of Justice over this on January 28. The court's decision will be delivered on March 18.
Andreas Mundt, President of the Federal Cartel Office, said: "Apple operates a comprehensive digital ecosystem, which, through its many services and connected devices, the App Store and Apple ID, provides Apple with extensive access to user data relevant for advertising. Apple uses some of these data to offer advertising space for personalized advertising in its App Store, generating significant revenues."
He said advertising was also of "great commercial significance for other companies wishing to offer free apps, some of which compete with Apple's own services, in the App Store." Those providers do not have a "wealth of broad and deep user data to draw on" like Apple does, he added.
[15]
"For us, it is key that users can make a free and informed decision about whether or not their data may be used for personalized advertising at all. The question at hand is whether Apple is allowed to apply stricter criteria to other providers than to itself when it comes to requesting such user consent. In our preliminary view, doing so may amount to unequal treatment and self-preferencing, which are prohibited under competition law."
Apple had not responded to a request for comment at the time of publication. ®
Get our [16]Tech Resources
[1] https://www.bundeskartellamt.de/SharedDocs/Meldung/EN/Pressemitteilungen/2025/02_13_2025_ATTF.html?nn=48916
[2] https://www.theregister.com/2024/05/14/uk_newspaper_apple/
[3] https://www.theregister.com/2024/05/14/uk_newspaper_apple/
[4] https://www.adexchanger.com/mobile/how-facebook-is-overhauling-its-attribution-standards-to-deal-with-apples-att/
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Z68iVPUkJZjo34YU3DqgEQAAAVA&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[6] https://www.theregister.com/2022/02/03/facebook_q4_2021/
[7] https://s21.q4cdn.com/399680738/files/doc_financials/2021/q4/Meta-Q4-2021-Earnings-Call-Transcript.pdf
[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Z68iVPUkJZjo34YU3DqgEQAAAVA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Z68iVPUkJZjo34YU3DqgEQAAAVA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[10] https://www.theregister.com/2025/01/23/cma_google_apple_mobile/
[11] https://www.theregister.com/2025/01/16/apple_dma_compliance_criticized/
[12] https://www.theregister.com/2025/01/15/uk_tribunal_apple_fees/
[13] https://www.theregister.com/2024/11/14/apple_sued_icloud_uk/
[14] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Z68iVPUkJZjo34YU3DqgEQAAAVA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[15] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Z68iVPUkJZjo34YU3DqgEQAAAVA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[16] https://whitepapers.theregister.com/
In a preliminary legal assessment of Apple's App Tracking Transparency framework (ATTF), Germany's competition watchdog [1]said the "strict requirements under the ATTF only apply to third-party app providers, not to Apple itself."
It is a common tactic to track users across devices – sometimes by a free app dev trying to get paid a premium for "profiled" ads, sometimes by a technical vendor selling services to the ad industry or a content provider that traditionally would have run print ads, like a [2]newspaper . Whether or not users know it is happening and agree to it is probably a better question.
Brit publishers beg Apple not to hurt online ad revenue [3]READ MORE
Since 2021, when Apple set up the iOS ATTF, app devs have had to ask iPhone and iPad users for their consent before applications could track their activity across other apps such as Facebook. Facebook owner Meta had a problem with this, especially when a 2022 ATTF update began to preclude advertisers from using data across their own platforms. This practice is known as "first-party" tracking as opposed to "third-party" tracking.
As one programmatic ad news outlet [4]pointed out , Facebook was actually hit the hardest by the 2022 first-party rules because its software development kit (SDK) "plugged into so many outside apps and ... its attribution pixels [were] littered liberally across the web." This meant that when an iPhone user with the latest ATTF update was on Instagram, data could not be collected on what the user was doing on Facebook, and vice versa.
[5]
Meta was so worried about this that it chalked up a [6]$10 billion hole in potential ad sales to the move, with CFO Dave Wehner saying in a February [7]2022 earnings call [PDF] discussing its full-year 2021 results: "We believe the impact of iOS overall as a headwind on our business in 2022 is on the order of $10 billion."
[8]
[9]
Judging by what the Bundeskartellamt said of its preliminary findings, though, Apple's "comprehensive digital ecosystem" appears to suffer less degradation in cross-tracking.
The Federal Cartel Office claims that Apple's ATTF defines "tracking" in a way that only covers data processing for advertising purposes across companies – but that these "strict ... rules do not cover Apple's own practice of combining user data across its ecosystem – from its App Store, Apple ID and connected devices – and using them for advertising purposes."
[10]Brit competition watchdog takes aim at Google, Apple's mobile ecosystems
[11]Apple's interoperability efforts aren't meeting spirit or letter of EU law, advocacy groups argue
[12]British tribunal claim aims to take a bite out of Apple over App Store fees
[13]Apple hit with £3 billion claim of ripping off 40 million UK iCloud users
Additionally, it says the consent dialogues for Apple's apps differ "substantially" from those of third-party apps. The current design, particularly the wording of the dialogue for Apple's own apps, makes it "more likely that users will consent than that of the ATTF dialogue for third-party apps."
It also claims that people using third-party apps will see up to four consecutive consent prompts, while Apple apps receive only a "maximum of two," which do not properly explain that Apple's processing of user data across services constitutes first-party tracking.
[14]
Apple has been under extra scrutiny in Germany since April 2023, when the regulator determined that Apple had "cross-market significance for competition," meaning it is now subject to "extended abuse control." Apple appealed to the Federal Court of Justice over this on January 28. The court's decision will be delivered on March 18.
Andreas Mundt, President of the Federal Cartel Office, said: "Apple operates a comprehensive digital ecosystem, which, through its many services and connected devices, the App Store and Apple ID, provides Apple with extensive access to user data relevant for advertising. Apple uses some of these data to offer advertising space for personalized advertising in its App Store, generating significant revenues."
He said advertising was also of "great commercial significance for other companies wishing to offer free apps, some of which compete with Apple's own services, in the App Store." Those providers do not have a "wealth of broad and deep user data to draw on" like Apple does, he added.
[15]
"For us, it is key that users can make a free and informed decision about whether or not their data may be used for personalized advertising at all. The question at hand is whether Apple is allowed to apply stricter criteria to other providers than to itself when it comes to requesting such user consent. In our preliminary view, doing so may amount to unequal treatment and self-preferencing, which are prohibited under competition law."
Apple had not responded to a request for comment at the time of publication. ®
Get our [16]Tech Resources
[1] https://www.bundeskartellamt.de/SharedDocs/Meldung/EN/Pressemitteilungen/2025/02_13_2025_ATTF.html?nn=48916
[2] https://www.theregister.com/2024/05/14/uk_newspaper_apple/
[3] https://www.theregister.com/2024/05/14/uk_newspaper_apple/
[4] https://www.adexchanger.com/mobile/how-facebook-is-overhauling-its-attribution-standards-to-deal-with-apples-att/
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Z68iVPUkJZjo34YU3DqgEQAAAVA&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[6] https://www.theregister.com/2022/02/03/facebook_q4_2021/
[7] https://s21.q4cdn.com/399680738/files/doc_financials/2021/q4/Meta-Q4-2021-Earnings-Call-Transcript.pdf
[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Z68iVPUkJZjo34YU3DqgEQAAAVA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Z68iVPUkJZjo34YU3DqgEQAAAVA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[10] https://www.theregister.com/2025/01/23/cma_google_apple_mobile/
[11] https://www.theregister.com/2025/01/16/apple_dma_compliance_criticized/
[12] https://www.theregister.com/2025/01/15/uk_tribunal_apple_fees/
[13] https://www.theregister.com/2024/11/14/apple_sued_icloud_uk/
[14] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Z68iVPUkJZjo34YU3DqgEQAAAVA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[15] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Z68iVPUkJZjo34YU3DqgEQAAAVA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[16] https://whitepapers.theregister.com/
Serously, Apple?
Anonymous Coward
Do you mean the company who makes the phone and keeps it up to date? The company that's responsible for making sure that the phone conforms to the regulations of the country its used in? How naive can you be?
One rule for thee...
Mentat74
And another for me...
Almost all large tech companies are complete privacy-raping bastards these days.
Re: One rule for thee...
KittenHuffer
And almost every small tech company wants to be!
OTOH...
Anonymous Coward
If google had their way, you would receive ads aimed at you as you drove down the highway from all the billboards and signs that are connected to the internet.
Then there is MS and all that 'phone home' telemetry in W11
Three wrongs don't make a right but IMHO, there are worse offenders out there regarding privacy and tracking than Apple.
Re: OTOH...
Kevin Johnston
While that may be the case (or not, this is not directly measurable so has to go down as subjective) complaining that Company A is not the worst should not allow them to skip any punishment. Sometimes it is simpler to hit the more obvious infractions and allow the fear of a real punishment to spread to the companies who thought they were too big to be held accountable.
Because Apple is more equal
Jou (Mxyzptlk)
'nuff said...
Attribution pixels
How is it that this shit hasn't been outlawed already ?
The one pixel thingy that spies on you is as old the Internet now, and everyone knows about it.
Block it. Stop it. And sue the companies that use it.