How Apple Changed Tracking, 2012–2026

Where Things Stand on Apple Devices

The changes add up to a clear picture for marketers in 2026. Here is what still works, function by function.

App Attribution Runs on Apple's Aggregates.

The IDFA is only available when a person allows tracking in App Tracking Transparency; otherwise it returns zeros. Install measurement runs through Apple's own frameworks: SKAdNetwork 4 sends up to three postbacks over 35 days, with more detail for larger campaigns, and AdAttributionKit extends that to alternative app stores in the EU. Expect delayed, grouped results, and plan budgets around them.

Web Analytics Undercounts Returning Visitors.

Safari limits cookies set by scripts, including first-party analytics cookies, to seven days, and applies the same cap to cookies set through CNAME cloaking. A Safari visitor who comes back after a week can look new, so treat new-versus-returning figures for Safari traffic with care.

Cross-Site Audiences Are Gone on iPhone.

No iPhone browser accepts third-party cookies, Safari blinds known fingerprinting scripts, and from iOS 27 iPhone browsers refuse requests to a list of ad tech and identity domains. Retargeting and frequency capping across sites now depend on first-party lists and the platforms' own signed-in audiences.

Click IDs and Email Opens Are Unreliable.

Link Tracking Protection strips known click IDs from links shared in Messages and Mail and from Private Browsing, and Mail Privacy Protection makes email opens meaningless as an engagement signal. Measure clicks and conversions instead.

SDKs Have to Declare What They Do.

Apps and their SDKs must publish privacy labels and ship privacy manifests listing the data they collect and the tracking domains they contact. Ask every vendor in your app for theirs.

What Sets Apple Apart

Apple enforces privacy through the operating system, not policy. When it decides something is tracking, it switches it off for everyone, usually announcing in June at its developer conference and shipping with the new iOS in September. The tracking prompt was the exception: Apple delayed it by seven months to give developers time. That gives marketers a few months' warning each year, and very little room to negotiate.

It also makes Apple a gatekeeper as well as a referee. France's competition authority fined Apple over how it implemented the prompt, and the iOS 27 block list raises the same question about who decides which companies may operate.