Official forum for Utopia Community

You are not logged in.

#1 2023-07-30 22:37:48

Registered: 2023-01-04
Posts: 1,952

Apple Issues New Guidelines to Developers to Prevent Data Misuse

Apple has stated that in order to prevent the misuse of certain APIs for data collection, starting with the release of iOS 17, iPadOS 17, macOS Sonoma, tvOS 17, and watchOS 10 later this year, it will be necessary for developers to provide justification for using those APIs in their apps.

According to a statement from the business, "this will help ensure that apps only use these APIs for their intended purpose.". You must choose one or more authorized reasons that accurately describe how your app uses the API as part of this process, and your app can only use the API for the reasons you've chosen. ".

The APIs related to the following that demand justification for use are.

APIs for file timestamps.
APIs for system boot.
APIs for disk space.
APIs for active keyboards, and.

APIs that are set to the user's defaults.

The iPhone manufacturer claimed that it is taking this action to prevent app developers from abusing such APIs to gather device signals in order to perform fingerprinting, which could be used to individually identify users across various apps and websites for other purposes like targeted advertising.

Developers will be required to disclose the justifications for using these "required reason APIs" in their apps' privacy manifests as part of the policy enforcement, which takes effect in Fall 2023 and also applies to visionOS. Apps won't be accepted starting in the spring of 2024 if their privacy manifest file doesn't explain how they use the APIs.

In its developer documentation, Apple expressly states that fingerprinting is not permitted, regardless of whether a user grants your app permission to track them. "One or more approved reasons that accurately reflect your use of each of these APIs and the data derived from their use must be declared by your app or third-party SDK. ".

"You may use these APIs and the information obtained through their use only for the stated purposes. You cannot use the APIs or derived data for tracking, and the stated reasons must be consistent with the functionality of your app as it is displayed to users. ".


Board footer

Powered by FluxBB