Facebook says Apple has restored its access to enterprise certificates, bringing internal apps back online
Update: In a leaked memo obtained by Business Insider, Facebook continues to defend its Research app, as well as its decision to distribute it via enterprise certificates. Read the details below.
Context & Ripple Effects
The dispute began when Apple disabled Facebook's enterprise certificates, taking down the internal iOS apps Facebook's own employees rely on, after Facebook was found distributing its Research app — the successor to Onavo — through certificates meant only for in-house software. Within roughly two days, Apple relented: access is restored and internal apps are back online.
Facebook isn't treating this as a quiet capitulation. A leaked internal memo shows the company still defending the Research app's distribution method and its data-collection disclosures, while employee anger at the Onavo team flares internally over the disruption. The parallel case matters too: Apple applied the identical punishment-and-restoration sequence to Google.
First-order effects
- Facebook's internal iOS apps — lunch, travel, and other employee tools — are immediately usable again, ending a serious operational disruption inside the company.
- Facebook remains publicly committed to the Research app despite the episode, per its leaked memo, so the underlying practice Apple objected to is defended rather than abandoned.
Second-order effects
- Google received the same treatment — certificates pulled for misuse, then restored — meaning Apple has now enforced its enterprise-certificate rules against both of its largest developer partners within days, establishing symmetry rather than a one-off.
- Other large companies running consumer research programs through enterprise certificates face a clear signal that Apple can and will cut them off, raising the compliance bar for any app distributed outside the App Store review process.
Third-order effects
- If the pattern holds, Apple's developer programs function as an enforcement layer over data-collection practices that App Store review alone doesn't reach — gatekeeper power exercised not just over what ships to consumers, but over how even trillion-dollar partners gather data on iOS.
- The episode also exposes the fragility of enterprise-dependent internal operations: companies whose employee tooling runs on a single vendor's certificates now carry a structural dependency that can be revoked unilaterally, which may push some toward diversifying internal app platforms.
The trend: Platform gatekeepers are increasingly wielding developer-program enforcement — certificate revocation and restoration — as a direct lever over the data-collection behavior of their biggest partners.