According to security researchers, Apple is allegedly able to identify users in the analytics collected by the company via a unique identifier that can be linked to the user's iCloud account.
As a privacy-conscious company, Apple's introduction of App Tracking Transparency and its promise not to collect identifiable data about users' usage habits should reassure users that they will not necessarily be tracked and their data monetized in any way. However, as two researchers have found, Apple seems to be able to do so. In a number of tweets iOS developer Mysk examined Apple's systems and discovered an ID in the analytics data called a "dsId." It was later determined to be a "Directory Services Identifier" linked to an iCloud account.
App Store: Did Apple hide important details?
Any DSID can theoretically be matched to an existing iCloud account. If the research is correct and Apple has decided to do so, it contains the user's name, email address, and other account details. The identifier is included in all analytics data the App Store sends to Apple—other apps do the same. Mysk says this means "your detailed behavior while browsing apps in the App Store is sent to Apple and contains the ID needed to link the data to you." Mysk points out that Apple's own statement on Device Analytics & Privacy states:
“None of the information collected identifies you personally,” which is described as “inaccurate.”
Apple has previously publicly stated that it is not able to sell user data and has also explained how Apple uses data in its advertising platforms. This includes stating that the advertising platform does not link user or device data with data collected by third parties for targeted advertising and that it does not share user or device identifiers with data collection companies.
A class action lawsuit has been filed
Despite claims that Apple does not sell data and is working to anonymize data used by its advertising platform customers, the problem is that Apple could potentially use the identifiable data for its own purposes and that there is evidence that the company has the ability to collect identifiable data. On November 12, a class action lawsuit was filed against Apple, claiming that Apple violates users' right to privacy by knowing what users are viewing in the App Store app. This lawsuit was based on research by Mysk. However, researchers at the time were unable to examine what data was being sent in iOS 16 due to encryption. (Photo by Ar_TH / Bigstockphoto)
