Apple Forces Developers to Remove Secret Screen-Recording Analytics
Apple demands that app developers remove or disclose hidden analytics tools that record user interactions without permission. The crackdown follows a TechCrunch investigation into session replay software leaking sensitive user data.
Apple orders app developers to remove or properly disclose hidden analytics code that records how users interact with their iPhone apps. The company states that protecting user privacy is paramount and requires apps to request explicit consent and provide a clear visual indication when recording user activity. Developers who fail to comply face immediate removal from the App Store.
This crackdown follows a TechCrunch investigation that reveals major companies like Expedia and Hotels.com use a third-party tool called Glassbox to record every tap and swipe inside their apps. None of the tested apps ask for user permission or mention the screen recording in their privacy policies. Although the tool is designed to mask sensitive information, the investigation shows that private data like passport and credit card numbers is leaking through these session replays.
Apple gives affected developers less than a day to remove the offending code and resubmit their apps before facing removal. Glassbox provides this session replay technology to help companies reduce app error rates but does not enforce its customers to disclose its use in their privacy policies. Apple expressly forbids apps that covertly collect data without user permission, making this analytics practice a direct violation of App Store guidelines.