Apple begins rejecting apps that use advertising SDKs for fingerprinting users
- Reference: 1617393020
- News link: https://www.theregister.co.uk/2021/04/02/apple_apps_tracking/
- Source link:
Fingerprinting code of this sort is used by marketers for ad-related tracking, a practice Apple aims to curtail in its next iOS update.
[1]
iOS 14.5 is expected to implement Apple's [2]App Tracking Transparency (ATT) framework, which has been delayed for months due to the objections of large advertisers [3]like Facebook . ATT brings with it an App Store rule change that requires developers to implement an app-tracking authorization request to ask users to opt-in to being tracked and having their data collected. Facebook and Google have both warned that giving people this privacy choice will mean less ad revenue for publishers, not to mention their share of it.
Apple's developer guidelines were [4]expanded in late January explicitly to disallow fingerprinting in apps that "reference SDKs (including but not limited to Ad Networks, Attribution services and Analytics)." The fingerprinting ban and other pending privacy rule changes were discussed back at the company's June 2020 developer conference. Enforcement of those rules has now expanded to cover device-derived fingerprinting.
[5]
Will Apple blink? ByteDance, Tencent, others ready new ad-tracking tech in defiance of iOS privacy protections [6]READ MORE
On Friday, Paul Müller, CEO of mobile analytics biz Adjust, said Apple had started enforcing its ATT restrictions. "Our SDK was one that was flagged because it had code that Apple indicated as being in violation of their guidelines," he said in a [7]blog post . "This code was in the SDK to collect information for our fraud prevention suite."
Müller said a compliant version of the Adjust SDK, v4.28, has been released and advised customers to ensure they've revised their apps to incorporate the updated code. He further suggests that Apple's ban of the Adjust SDK arose from iOS app reviewers who identified object references or symbols (e.g. NSFileManager ) that Adjust added to its SDK to combat spoofing but weren't exposed for customer usage.
"Apple saw these symbols and flagged them because they were similar to symbols being used in other SDKs that together could be used to create a persistent ID, even if a user didn’t consent," he explained, insisting that while other ad tech firms may have been misusing the symbols, Adjust never used them for crafting an identifier.
In any event, the [8]objectionable object references have been removed from the Adjust SDK, he said.
Other companies flirt more openly with defiance, though they stop short of rebellion, which would accomplish little given Apple's near-absolute control over its iOS ecosystem.
According to the Financial Times, Snap [9]has explored options for bypassing Apple's privacy rules for its Snapchat messaging app. Snap, it's claimed, sought to use data from third-party companies to identify people who responded to ad campaigns in the hope its developers could cross-reference data like IP addresses with its own information to track app users via a fingerprinting technique called "probabilistic matching."
However, when asked about this by the Financial Times, Snap insisted it supports Apple's guidelines and believes advertising should respect consumer privacy. We reached out to Snap for comment but we've not heard back.
The Chinese Advertising Association, meanwhile, [10]has developed an identifier called the China Anonymization ID, or CAID, that it hopes will provide the tracking capability lost through iOS 14.5's privacy protections. Apple reportedly has warned developers in China not to flout its rules.
Apple did not respond to a request for comment.
Apple's smartphone rival Google is also taking steps to improve privacy in its Android ecosystem. The ad biz recently issued a [11]Google Play policy update that restricts availability of an API in Android 11 (API level 30) called QUERY_ALL_PACKAGES . The API returns a list of apps installed on the queried device, which Google now considers to be a high-risk permission.
"Play regards the device inventory of installed apps queried from a user’s device as personal and sensitive information, and use of the permission is only permitted when your app's core user facing functionality or purpose, requires broad visibility into installed apps on the user’s device," Google's support document explains.
[12]
To use this permission, apps must provide either device search, antivirus, file management, or browsing functions and must sufficiently justify and disclose the use of the API. ®
Get our [13]Tech Resources
[1] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/applications&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YGeUDqOo1YVGDRU5ChjfcAAAAEU&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[2] https://developer.apple.com/documentation/apptrackingtransparency
[3] https://www.theregister.com/2020/08/27/facebook_ios_ads/
[4] https://web.archive.org/web/20210129000113/https://developer.apple.com/app-store/user-privacy-and-data-use/
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/applications&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YGeUDqOo1YVGDRU5ChjfcAAAAEU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://www.theregister.com/2021/03/17/apple_china_tracking/
[7] https://www.adjust.com/blog/How-to-be-strategic-about-attribution-after-iOS145/
[8] https://a.storyblok.com/f/47007/x/fa80e1c0f6/ios-14-5-rejected-symbols.pdf
[9] https://www.ft.com/content/dd724838-d37f-4894-b986-e4675482161e
[10] https://www.theregister.com/2021/03/17/apple_china_tracking/
[11] https://support.google.com/googleplay/android-developer/answer/10158779
[12] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/applications&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YGeUDqOo1YVGDRU5ChjfcAAAAEU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[13] https://whitepapers.theregister.com/
"Google is also taking steps to improve privacy in its Android ecosystem. "
No it isn't, Google is taking steps to limit access to private data from advertisers and others using it's platform so that it can sell that data to them in one form or another because google is still slurping for itself at the same rate.
What else would it do with all that lovely data?
Google is telling users that Hangouts needs to be replaced by a bunch of different apps, each one will have a unique privacy policy and boost the total data collection for Google to sell.
More apps = more data = more money
It is in Google's interest
For app makers to lose access to the tracking info, but for Android itself to keep collecting it. That makes using Google's advertising services more attractive as they can be better targeted and further disadvantages Google's competitors like Facebook.
Well, ignoring all the data that suggests that personalized/targeted ads don't help beyond more "bulk" targeting techniques that advertised used long before computers - i.e. basing it on where you live, your age, your income range (which if nothing else can be generally inferred by where you live) and so forth.
This is nice, but
At least for China's "CAID" effort, I wouldn't be shocked if the big tech companies behind it get China to pass a law making support for CAID tracking mandatory. If so, Apple would have no choice but to allow it for Chinese apps on the China app store.
Maybe the Chinese government won't care enough to bother though, I really don't know. If so it will be interesting to see if Apple pulling major Chinese apps like WeChat over this would result in Chinese consumers blaming Apple or blaming their own tech companies. Anyone know whether Chinese consumers care about being tracked for advertising purposes, or are they so accepting of being tracked by their government that they don't care if apps separately track them as well?
Boo hoo!
Ad slinging parasites being evicted from host.
Good Apple
I’m a fanboi!