Apple Forces Developers to Remove Secret Screen-Recording Code
Apple demands that app developers remove or disclose hidden analytics tools that record user interactions without permission. The crackdown follows a report exposing major apps for leaking sensitive user data through session replay technology.
Apple orders app developers to remove or properly disclose hidden analytics code that records how users interact with their iPhone apps. The company states that protecting user privacy is paramount and requires apps to request explicit consent and provide a clear visual indicator when logging user activity. Developers who fail to comply with these strict privacy guidelines face immediate removal from the App Store.
This crackdown follows a TechCrunch investigation that reveals major companies like Expedia, Hollister, and Hotels.com use a third-party tool called Glassbox to record every tap and swipe inside their apps. The tested apps do not ask for user permission or mention the screen recording in their privacy policies. Although the technology masks sensitive information, the investigation shows that private data like passport and credit card numbers still leaks through the recordings.
Glassbox provides this session replay technology to help companies reduce app error rates, but it does not enforce its customers to disclose the screen recording in their privacy policies. Apple expressly forbids apps that covertly collect data without permission, giving notified developers less than a day to remove the offending code and resubmit their apps. The tech giant makes it clear that any violation of these privacy terms results in swift action from the App Store review team.