Amid Privacy Concerns, Apple Has Started Rejecting Apps That Access UDIDs
Amid extra scrutiny from Congress around privacy issues, Apple this week has started rejecting apps that access UDIDs, or identification numbers that are unique to every iPhone and iPad.
Context & Ripple Effects
Apple's App Store review team has begun rejecting app submissions that access UDIDs — the unique identifiers baked into every iPhone and iPad — at exactly the moment Congress is applying extra privacy scrutiny to the company, a linkage the coverage treats as confirmed. The story traveled unusually fast: The Verge, PC Magazine, 9to5Mac, iDownloadBlog and four other outlets all ran versions within days, signaling how sensitive identifier-based tracking had become among developers.
There is no prior arc in this corpus — the rejection wave appears here as a fresh policy shift — so the significance lies in what the UDID was: the default cross-app tracking key for mobile ad networks and analytics providers, now cut off at the review gate rather than by legislation.
First-order effects
- Developers submitting apps or updates that read UDIDs now face outright rejection regardless of app quality, forcing immediate resubmissions stripped of the identifier.
- Ad networks and analytics SDKs embedded across the iOS catalog lose their primary cross-app identifier overnight, disrupting attribution for campaigns already in market.
Second-order effects
- Mobile ad networks are pushed toward substitute tracking methods — hashed identifiers, third-party alternatives, or device fingerprinting — which sit outside Apple's review criteria and are harder for outside auditors to see.
- Pressure mounts on Apple itself to ship an official replacement identifier it controls, letting the company enforce privacy at its gate while keeping targeted ads economically viable inside its platform.
Third-order effects
- Platform owners become the de facto enforcement layer for mobile privacy: review-time rejection, not regulation, becomes the binding constraint on what data developers may collect.
- If congressional scrutiny of device identifiers continues, identifier governance migrates from open developer convention to closed platform policy — concentrating the power to define acceptable tracking norms in a single vendor's hands.
The trend: Mobile advertising's identifier regime is moving from open device-level IDs like the UDID to platform-controlled replacements dictated by Apple under mounting political pressure.