Developers must ask for user permission, it says

Feb 8, 2019 08:07 GMT  ·  By

Apple is now requesting developers of apps using analytics service that record the activity on the screen of iOS devices to specifically ask for consent from users and provide a clear indicator as to when the process is running.

Earlier this week, it was discovered that a number of popular iOS apps use an SDK developed by Glassbox and which powers a feature called session replay to record the activity happening on the screen.

The apps included Expedia, Air Canada, and Singapore Airlines, each of which was downloaded millions on times on iOS.

While Apple remained tight-lipped at first, the company has started sending notices to developers to warn them that applications need to ask for permission before recording user activity.

“Protecting user privacy is paramount in the Apple ecosystem. Our App Store Review Guidelines require that apps request explicit user consent and provide a clear visual indication when recording, logging, or otherwise making a record of user activity,” Apple said in a statement for TechCrunch.

“We have notified the developers that are in violation of these strict privacy terms and guidelines, and will take immediate action if necessary.”

If developers do not update their apps to align with Apple’s requirements, the company could temporarily ban them from the App Store.

Developers given just one day to comply

In a long statement for MacRumors, Glassbox says the data that its customers collect from iOS devices isn’t supposed to help them spy on users and isn’t shared with third parties.

“Glassbox and its customers are not interested in "spying" on consumers. Our goals are to improve online customer experiences and to protect consumers from a compliance perspective,” the company explains.

“We provide our customers with the ability to mask every piece of data entered by a consumer, restrict access to authorized users, and maintain a full audit log of every user accessing the system.”

Developers are reportedly provided with just one day to update their apps, otherwise, they could be removed from the App Store until they comply with the requirements.