Apple App Store accused of tracking all user clicks

Post LinkedIn

🏠Read original on IT之家

#privacy #data-collection #user-behaviorapp-store

💡Understand the privacy implications of behavioral data collection in major app ecosystems for your own AI products.

⚡ 30-Second TL;DR

What Changed

Apple introduced a 'Personalized Collections' feature for App Store recommendations.

Why It Matters

This raises significant privacy concerns regarding how big tech companies leverage user behavioral data for algorithmic recommendations. It highlights the tension between personalized AI-driven experiences and user data transparency.

What To Do Next

Review your app's data collection policies to ensure compliance with emerging privacy standards regarding behavioral tracking and user consent.

Who should care:Developers & AI Engineers

🧠 Deep Insight

Web-grounded analysis with 12 cited sources.

🔑 Enhanced Key Takeaways

•Mysk clarified that the granular tap logging in the App Store is distinct from search functionality returning results as a user types; it constitutes analytics data actively sent to Apple.
•The existing opt-out mechanism for 'Personalized Recommendations' only prevents the application of collected data for suggestions, not the cessation of the underlying tap-level data collection itself.
•Previous research by Mysk in November 2022 indicated that Apple's first-party apps, including the App Store, Apple Music, Apple TV, Books, and Stocks, continued to collect detailed analytics data even when users had explicitly disabled 'Share iPhone Analytics' settings, contradicting Apple's stated privacy assurances.
•Apple's internal definition of 'tracking' is narrower than commonly understood, specifically referring to linking user or device data collected from its apps with data from third parties for advertising purposes, which allows Apple to claim it 'does not track' its users while still collecting extensive first-party analytics.

🛠️ Technical Deep Dive

The App Store app transmits timestamped records for each individual character typed by a user, with timing resolution precise enough to calculate typing speed down to fractions of a second.
Collected data includes information about the specific tab the user is currently viewing within the App Store and the version of the operating system in use.
This granular data is sent as 'analytics data' to Apple, rather than merely being part of the search query endpoint that returns results.
The collected analytical data is associated with the user's Apple ID.
Device information such as IP address and a unique device identifier are also collected and linked to App Store activity.
Uncorroborated reports suggest that some of this data may be transmitted unencrypted.

🔮 Future ImplicationsAI analysis grounded in cited sources

Increased regulatory scrutiny on Apple's privacy practices.

The apparent discrepancy between Apple's public privacy rhetoric and its reported granular data collection practices is likely to attract attention from privacy regulators and consumer protection agencies.

Erosion of user trust in Apple's privacy claims.

Repeated reports of extensive first-party data collection, particularly without clear and effective opt-out mechanisms, could damage Apple's carefully cultivated image as a privacy-first company.

Potential for new class-action lawsuits.

Similar findings by Mysk in 2022 already led to a class-action lawsuit alleging Apple's continued tracking of app activity despite disabled privacy settings, suggesting this new report could instigate further legal challenges.

⏳ Timeline

2010

Steve Jobs emphasizes user consent for data sharing.

2014

Apple introduces improved encryption with iOS 8, aiming to put privacy in user hands.

2021-04

Apple introduces the App Tracking Transparency (ATT) framework, requiring third-party apps to ask user permission for cross-app/website tracking.

2022-11

Mysk researchers report that Apple's own apps, including the App Store, collect detailed analytics even when 'Share iPhone Analytics' is disabled.

2023-01

A class-action lawsuit is filed against Apple based on Mysk's 2022 findings, alleging continued tracking despite disabled privacy settings.

2026-06

Apple introduces 'Personalized Collections' in the App Store; Mysk reports granular tracking of every tap and typing speed without an opt-out for this feature.