iOS 17 and macOS Sonoma will include Link Tracking Protection in Mail, Messages, and Safari's private mode to automatically remove tracking parameters in URLs
Context & Ripple Effects
Link Tracking Protection is the latest step in a six-year arc of Apple shipping tracking defenses at WWDC rather than waiting for regulation: macOS High Sierra introduced Safari tracking protection in 2017, followed by the 2018 crackdown on fingerprinting and social-button tracking that was explicitly framed as a shot at Facebook, then Mail Privacy Protection's pixel blocking in 2021 left newsletters scrambling for alternative audience measurement.
The difference this time is scope: instead of blocking third-party trackers or pixels, iOS 17 and macOS Sonoma rewrite the links themselves — stripping tracking parameters in Mail, Messages, and Safari private mode — so attribution data disappears before it ever reaches an advertiser's analytics.
First-order effects
- Advertisers and analytics vendors lose click-through attribution on any campaign link shared through Mail, Messages, or Safari private mode, because UTM-style parameters are removed client-side by Apple before the destination site sees them.
- Apple extends its privacy-as-default positioning beyond Safari into Mail and Messages, surfaces where users never opted into any anti-tracking setting.
Second-order effects
- Newsletter publishers, who already rebuilt measurement around workarounds after Mail Privacy Protection blocked tracking pixels, now lose link-parameter data as well, pushing them further toward subscription-first business models and direct reader relationships.
- Brave, Edge, and Firefox — which per the coverage already ship features that block or limit web tracking — face pressure to match parameter-stripping in their own mail-adjacent and browsing surfaces to avoid looking lax on privacy.
Third-order effects
- If each WWDC cycle strips another layer of passive tracking, the ad-measurement industry structurally migrates from URL-borne signals to first-party and server-side collection that runs on the advertiser's own domain, outside the reach of client-side rewriting.
- Safari's willingness to break shared-web conventions hardens its stance in interoperability fights — the same refusal pattern already visible in its handling of contentious API proposals — making privacy unilateralism a durable competitive weapon for the platform holder.
The trend: Platform holders are progressively dismantling URL-based tracking client by client, forcing advertising measurement to rebuild around first-party data.