How tech giants use digital fingerprints of devices without our knowledge.
Apple tightening its policy to combat digital tracking of users of iOS devices, requiring app developers, starting from May 1, 2024, to justify the use of certain APIs that can be used to identify devices. Apps without such justification will not be allowed in the App Store, which looks significantly stricter than the usual warning that the company sent to violators earlier.
A digital fingerprint of a device is created by collecting information about various system settings and device components, which are then combined into a unique identifier. This allows you to track users online and, for example, show them targeted ads. However, the collection of such data also poses a potential threat to privacy.
Apple allows this type of tracking only with the user's explicit consent, prohibiting the creation of digital fingerprints without permission. Data received via potentially privacy-threatening APIs must be stored locally on the device. Examples of such APIs include requests for system boot time, free disk space, keyboard activity, and others.
However, according to a study by developers Talal Haj Bakri and Tommy Myska, tech giants such as Meta*, Spotify and Google are not complying with Apple's new rules. These companies formally indicate the reasons for using the corresponding APIs, but then send the collected data outside the devices, acting contrary to Apple's privacy requirements.
"It is difficult to say for sure whether this data is used for digital fingerprints. However, Apple has already classified a set of APIs that are potentially suitable for this. Therefore, applications must declare reasonable reasons for their use," said Tommy Mysk.
Google representatives said that the company's specialists reviewed the study and found no violation of Apple's policy. The collected data is allegedly not used to create a digital fingerprint and only provides proper functionality of the device. Meta and Spotify have not yet responded to requests for comment.
This situation, regardless of Google's explanation, calls into question Apple's ability to effectively monitor the implementation of new privacy rules by major market players.
Of particular concern is the selective approach of companies to ensuring the security of user data. In this regard, in the near future, more stringent supervision and even sanctions from Apple for violators of the privacy policy may be required.
Apple tightening its policy to combat digital tracking of users of iOS devices, requiring app developers, starting from May 1, 2024, to justify the use of certain APIs that can be used to identify devices. Apps without such justification will not be allowed in the App Store, which looks significantly stricter than the usual warning that the company sent to violators earlier.
A digital fingerprint of a device is created by collecting information about various system settings and device components, which are then combined into a unique identifier. This allows you to track users online and, for example, show them targeted ads. However, the collection of such data also poses a potential threat to privacy.
Apple allows this type of tracking only with the user's explicit consent, prohibiting the creation of digital fingerprints without permission. Data received via potentially privacy-threatening APIs must be stored locally on the device. Examples of such APIs include requests for system boot time, free disk space, keyboard activity, and others.
However, according to a study by developers Talal Haj Bakri and Tommy Myska, tech giants such as Meta*, Spotify and Google are not complying with Apple's new rules. These companies formally indicate the reasons for using the corresponding APIs, but then send the collected data outside the devices, acting contrary to Apple's privacy requirements.
"It is difficult to say for sure whether this data is used for digital fingerprints. However, Apple has already classified a set of APIs that are potentially suitable for this. Therefore, applications must declare reasonable reasons for their use," said Tommy Mysk.
Google representatives said that the company's specialists reviewed the study and found no violation of Apple's policy. The collected data is allegedly not used to create a digital fingerprint and only provides proper functionality of the device. Meta and Spotify have not yet responded to requests for comment.
This situation, regardless of Google's explanation, calls into question Apple's ability to effectively monitor the implementation of new privacy rules by major market players.
Of particular concern is the selective approach of companies to ensuring the security of user data. In this regard, in the near future, more stringent supervision and even sanctions from Apple for violators of the privacy policy may be required.
