[1] https://www.scss.tcd.ie/doug.leith/apple_google.pdf
[2] https://www.bloomberg.com/news/newsletters/2022-08-14/apple-...
I have relationships with Apple and Google. The line around what data usage is appropriate with those companies somewhat nebulous, and also somewhat a personal decision.
For instance - the paper you site shows that Apple and Google send location data from devices to the server. Those devices also both ship with functionality for things like mapping and local weather. So for iOS, you have to approve sharing location data (even for the built-in weather app and maps app) on an app-by-app basis. Android has gotten better about this over the years, but I don't know current state.
Facebook is (was) correlating detailed profiles of users who had no relationship with Facebook, through interactions with third parties that were not part of Facebook, and without disclosure. That is a much simpler line to draw.
Even then, Apple gave the user choice - and the users almost universally chose not to give that capability.
Interestingly, Apple puts tracking for its own apps behind another setting that ignores the global setting.
Unlike its competitors, Apple does not give users a choice about whether to send location data to Apple (if you want to see your location at all) or about whether to send app install and search information to Apple. Apple's devices are worse on privacy on every axis when you consider whether they give users a choice.
b) How would the App Store even work at all if they didn't store your purchases.
b) Most of the apps I use aren't purchased. Why should Apple know which apps they are? Apple's privacy-respecting (in actuality instead of in marketing) competitors don't require this.
b) I’m not sure if developer installs are being tracked by Apple. Are they ?
b) Developer installs on iOS are even worse for privacy than App Store installs, requiring an up-to-date payment method to associate with your device instead of just an email address or phone number.
I can't disagree with this more. User privacy is user privacy.
But that's not privacy at all. Any additional confidant besides the sender and the recipient is a breach of privacy.
You wouldn't let it count as respecting privacy either if the post office read all your letters and stored the texts.
Facebook is impacted by third-party tracking - such capturing information and generating profiles for people, even those without Facebook accounts. They would do this via Facebook javascript and Facebook native app SDKs.
Apple's solution was App Tracking Transparency - a user consent on whether to provide a handy identifier to use for correlation across apps, and App Store rules which ban tracking using other mechanisms (such as IP address correlation).
For apps outside the store (e.g. web apps), the privacy proxy stuff and third-party state isolation/blocking are used to greatly reduce such correlation.
For first-party data collection, storage and sharing, there are consents for sharing information from the device (location, contacts, health information, and so on). There is also a privacy label (which App Store rules require to be accurate) on what data collected by an app used, for what purpose, and whether that use is linked to you or anonymized.
So a post office app that read the letters and stored the text would say that 'user content' was captured, and whether or not it was 'linked to you'.
Apple is playing dirty. Less dirty than Facebook, but that’s not a high bar.
That would be nearly 40% of users who are not hitting the 'Allow' button on the consent pop-over.
It's not privacy if only Apple has it, it's privacy if even Apple hasn't it
It remains an open question whether Apple itself is subject to those rules, though. If a user, via a third party app, takes an action Apple can identify, is Apple allowed to use that information to sell you ads? As of right now, it seems that they're leaning to "yes".
They haven't crossed any rivers yet, but the signs are there and we should all be worried.
The solution which will likely emerge is one of local profiling, both for native applications and at the web platform level. Advertisers and agencies will not gather user profile information, even in aggregate. Instead the profile will be something managed (or reset, or disabled) on-device/in-browser, and used to drive ad selection locally.
For example, the App Store interface might give you a set of recommendations for apps when launched, perhaps based on location information. This can be driven by downloads in your area, as well as purchased advertisements. But there's no reason that exact location needs to be shared at all - a set of coarser regional files containing the needed data can be grabbed, and the decision of what to display can be made locally.
That sounds nice indeed, but it would be a lot nicer if we got a statement to that effect from Apple Computer instead of dwaite on HN.
The reason Apple doesn't want targeted third party ads is so that they are the only ones that can sell targeted ads to their users. Their platform, their rules. For now at least.
And iOS/OSX users will still see targeted ads whenever they open their browser or third party apps.
The apps just need to either (a) ask the user for permission to track or (b) authenticate them.
If you think Apple hasn't violated that promise, you must have an extremely selective definition of privacy.
Just like android?