[intergalplan]

You can't realistically keep apps from tracking users without permission unless you're rejecting apps that are discovered to be doing that. If they have network access, they can track. The behavior is too abstract to be handled with permissions alone.

[vetinari]

The apps cannot track if they have no permission to access the respective APIs that give them data they are tracking. What are they going to send via the network? Only things that the users specifically give to the app.

[zepto]

Completely false.

Each app can track user behavior within the app itself, and can send this data to an aggregator who pays for it.

That way you are tracked across all participating apps.

This was common practice until Apple banned it.

[intergalplan]

Look up what the Apple's tracking-prevention policy prevents for users that don't opt-in to tracking. You cannot ban generating device or user identifiers with OS permissions alone. Prevent using the built-in ones, sure, but fingerprinting or otherwise creating device or user IDs to share with 3rd parties and other apps? I'd love to see what a permissions model would look like that could do that automatically, at the OS level. I don't think such a thing exists. Not for any app with enough access to the system to do anything remotely useful in the first place.

[yyyk]

Apple itself has the ability to reject apps with GateKeeper, without forcing everyone to use the Mac store.

[zepto]

> Apple itself has the ability to reject apps with GateKeeper, without forcing everyone to use the Mac store.

This is false.

Apple can’t legally use Gatekeeper to ’reject’ apps which violate App Store policies.

[tomjen3]

Lets suppose facebook found a way around the permissions. Would Apple ban them permanently?