Apple cracking down on 'fingerprinting' with new App Store API rules

Joystiq

Joystiq News
Apple will soon start cracking down on Apps that collect data on users' devices in order to track them (aka "
Please, Log in or Register to view URLs content!
"), according to an
Please, Log in or Register to view URLs content!
spotted by
Please, Log in or Register to view URLs content!
. Starting with the release of iOS 17, tvOS 17, watchOS 10 and macOS Sonoma, developers will be required to explain why they're using so-called required reason APIs. Apps failing to provide a valid reason will be rejected started in spring of 2024.

"Some APIs... have the potential of being misused to access device signals to try to identify the device or user, also known as fingerprinting. Regardless of whether a user gives your app permission to track, fingerprinting is not allowed," Apple wrote. "To prevent the misuse of certain APIs that can be used to collect data about users’ devices through fingerprinting, you’ll need to declare the reasons for using these APIs in your app’s privacy manifest."


The new rules could increase the rate of app rejections, some developers told 9to5Mac. For instance, an API called UserDefaults falls into the "required reason" category, but since it stores user preferences, it's used by a lot of apps. At the same time, it sounds like Apple will basically need to take a developer's word for reason declarations. If those prove to be false, though, it would certainly have a paper trail for any potential penalties.

Fingerprinting apps can use API calls to retrieve characteristics of your smartphone or PC, including the screen resolution, model, OS and more. It can then take all this information and create a unique "fingerprint," so it can identify you when you go to other apps or websites.

Apple effectively declared war on tracking when it
Please, Log in or Register to view URLs content!
, requiring developers to ask users' permission before tracking them. Since that feature arrived, only
Please, Log in or Register to view URLs content!
have agreed to app tracking. Now, it's trying to stop fingerprinting (also called canvas fingerprinting), which first appeared in the digital zeitgeist
Please, Log in or Register to view URLs content!
. Back in 2018, Apple said it would address fingerprinting on macOS by
Please, Log in or Register to view URLs content!
that websites can access on its Safari browser, and now, it's addressing the issue with apps as well.

This article originally appeared on Engadget at
Please, Log in or Register to view URLs content!


Please, Log in or Register to view URLs content!


Console Bang News!
 

Users who are viewing this thread

Top