Apple will soon start cracking down on apps that collect data on users’ devices to track them (aka “fingerprinting”), according to an article on website spotted by 9to5Mac. Starting with the release of iOS 17, tvOS 17, watchOS 10, and macOS Sonoma, developers will be required to explain why they’re using so-called required reason APIs. Apps that don’t provide a valid reason will be rejected, starting in spring 2024.
See also: Apple: What's new in iOS 16.6 and macOS Ventura 13.5
“Certain APIs… have the potential to be misused to access device signals for the purpose of identifying the device or user, also known as fingerprinting. Regardless of whether a user gives your app permission to track, fingerprinting is not permitted,” Apple wrote. “To prevent misuse of certain APIs that can be used to collect data about users’ devices through fingerprinting, you should declare the reasons for using those APIs in your app’s privacy file.”.
The new rules could increase app rejection rates, some developers told 9to5Mac. For example, an API called UserDefaults falls into the “required reason” category, but because it stores user preferences, it’s used by many apps. At the same time, it sounds like Apple will essentially have to take a developer’s word for their reason statements. If they turn out to be false, though, it could face penalties.
Suggestion: Apple fixes another zero-day vulnerability
Fingerprinting apps can use API calls to retrieve characteristics of your smartphone or computer, such as screen resolution, model, operating system, and more. It can then take all of this information and create a unique “fingerprint” so it can recognize you when you navigate to other apps or websites.
Apple essentially declared war on tracking when it released iOS 14.5 in 2021, requiring developers to ask users for permission before tracking them. Since that feature arrived, only 4 percent of U.S. iPhone users have consented to app tracking. Now, it’s trying to stop fingerprinting (also called canvas fingerprinting), which first appeared in the digital landscape a decade ago. Back in 2018, Apple said it would address fingerprinting on macOS by limiting the data that websites can access in the Safari browser , and now, it’s addressing the issue with apps as well.
Read also: Apple: Faces a $1 billion lawsuit
source of information:engadget.com
