Apple limits how often devs can prompt customers for reviews to 3 times/year in iOS 10.3, says it will include an option for users to turn off all such requests
With the next version of iOS, users will also be able to rate programs without having to go to the App Store.
Context & Ripple Effects
Apple is pairing this cap with a second move announced the same day: letting developers respond to reviews in the App Store and Mac App Store once iOS 10.3 ships. Together they reframe reviews as a managed channel rather than an open one — users get an opt-out and frictionless in-app rating, while developers get a dialogue but lose unlimited prompting.
First-order effects
- Developers who relied on repeated review prompts to farm ratings are now hard-capped at three requests per user per year, and any user can silence the channel entirely.
- In-app rating without an App Store visit lowers the cost of leaving a review, which should shift volume toward apps that ask well-timed, infrequent questions.
Second-order effects
- Custom-built prompt flows become noncompliant by design: months later Apple went further and started requiring developers to use the official rating API, disallowing bespoke prompts outright.
- Ratings become scarcer per developer, raising the value of each prompt and pushing teams toward product moments that genuinely warrant a request rather than blanket triggers.
Third-order effects
- The pattern generalizes across Apple's rulebook — from requiring justification for sensitive APIs in 2023 to mandating permission before sharing data with third-party AI providers in 2025 — establishing that user-facing touchpoints on iOS exist only as Apple-rationed, guideline-governed channels.
- If the cap-plus-API model holds, app discovery signals like ratings concentrate under Apple's instrumentation, strengthening the App Store's role as the sole arbiter of quality metrics developers must optimize against.
The trend: Platform owners are converting user attention into a rationed resource, replacing developer-controlled prompts with centrally governed APIs and opt-outs.