Apps from Apple's EU App Store continue to work even after refunds are processed
Benjamin Mayo / 9to5Mac :
Context & Ripple Effects
Two weeks after Apple introduced 14-day no-questions-asked refunds across the EU App Store and iTunes, 9to5Mac's Benjamin Mayo spotted a gap in the implementation: apps a user has already downloaded keep running even once the refund is processed. Under EU consumer law Apple had little choice but to offer the refund window — the question is whether its enforcement catches up.
The loophole matters because refunds were already a contested lever on the platform: years later, Epic's antitrust filing accused Apple of using vetting as a commission pretext while allegedly enabling user fraud through refunds of IAP content. A refund mechanism that doesn't revoke access sits at the center of that tension.
First-order effects
- EU users can effectively obtain paid apps for free by requesting a refund after downloading, since revocation isn't enforced at launch time.
- Developers whose apps are refunded this way lose the sale while still delivering the full product — the cost lands directly on their revenue.
Second-order effects
- Apple faces pressure to tie app entitlements to purchase status rather than one-time download, tightening server-side license checks.
- If unaddressed, refund abuse becomes ammunition for both sides of the store-commission debate: consumers cite it as proof of frictionless rights, while developers and Apple cite fraud losses — the same fault line Epic later attacked.
Third-order effects
- Consumer-driven return policies imposed on digital storefronts push platforms toward API-level control over what buyers can keep — the direction Apple later moved with StoreKit 2's in-app refund handling.
- The episode previews the recurring pattern of EU regulation forcing App Store behavior changes faster than Apple's enforcement engineering, a gap that widens as more mandated changes land.
The trend: App Store policies bent by EU consumer regulation keep producing loopholes that Apple closes years afterward through deeper API-level control over purchases and refunds.