Apple has announced a series of changes to iOS, Safari, and the App Store that will affect developers and users in the European Union (EU). The changes are meant to comply with the Digital Markets Act (DMA), a new regulation that aims to promote fair and open competition in the digital sector. The changes include new options for app distribution and payment processing, new capabilities for web browser engines, new data and analytics tools, and new user controls and disclosures. The changes will be available in March 2024, and will only apply to apps and users in the EU.
New Options for App Distribution and Payment Processing
One of the main changes that Apple is introducing is the ability for developers to distribute their iOS apps outside of the App Store, and to process payments using alternative methods. Developers will be able to use more than 600 new APIs to offer their apps for download from their own websites or other app marketplaces, and to manage updates and subscriptions. Developers will also be able to use third-party payment services or their own payment systems to process in-app purchases, and to offer discounts and promotions.
However, Apple warns that these new options come with new risks for developers and users, such as malware, fraud, scams, and privacy and security breaches. To mitigate these risks, Apple is introducing new safeguards, such as:
- Notarization for iOS apps: Developers who distribute their apps outside of the App Store will need to submit their apps to Apple for notarization, a process that verifies the app’s identity and checks for malicious code. Notarized apps will display a badge on the app icon and a confirmation message before installation, to inform users that the app is safe and secure.
- Authorization for marketplace developers: Developers who create their own app marketplaces will need to obtain an authorization from Apple, which will verify their identity and compliance with the DMA. Authorized marketplace developers will be able to use a new framework and APIs to install and update apps on behalf of other developers, and to access app analytics and ratings.
- Disclosures on alternative payments: Developers who use alternative payment methods will need to disclose the terms and conditions of their payment services, and to inform users of the benefits and risks of using them. Developers will also need to provide users with a receipt and a confirmation of their purchase, and to handle refunds and disputes.
New Capabilities for Web Browser Engines
Another change that Apple is introducing is the ability for developers to use alternative web browser engines in their iOS apps, instead of the default WebKit engine that powers Safari. Web browser engines are software components that render web pages and run web applications. Developers will be able to use web browser engines from other vendors, such as Google’s Chromium or Mozilla’s Gecko, and to customize them with their own features and preferences.
However, Apple warns that using alternative web browser engines may compromise the user’s privacy and security, as well as the performance and compatibility of the web content. To mitigate these issues, Apple is introducing new safeguards, such as:
- User consent for web browser engines: Developers who use alternative web browser engines will need to obtain the user’s consent before loading any web content, and to inform the user of the web browser engine they are using and the data they are collecting. Users will be able to revoke their consent at any time, and to switch to the default WebKit engine if they prefer.
- Restrictions for web browser engines: Developers who use alternative web browser engines will need to comply with certain restrictions, such as not accessing the user’s location, contacts, photos, or other sensitive data, not using private APIs or frameworks, and not interfering with the system’s security features. Apple will monitor and enforce these restrictions, and will revoke the developer’s authorization if they violate them.
New Data and Analytics Tools
Another change that Apple is introducing is the ability for developers to access more data and analytics about their apps and users, both on the App Store and outside of it. Developers will be able to use more than 50 new reports and metrics, such as app usage, engagement, commerce, retention, and more. Developers will also be able to use new tools and APIs to collect and analyze data from their own websites or app marketplaces, and to integrate them with the App Store data.
However, Apple warns that collecting and using more data may infringe the user’s privacy and consent, as well as the data protection laws and regulations. To mitigate these risks, Apple is introducing new safeguards, such as:
- User control and disclosure for data collection: Developers who collect data from their apps or websites will need to obtain the user’s consent before doing so, and to inform the user of the type, purpose, and duration of the data collection. Users will be able to revoke their consent at any time, and to access, correct, or delete their data. Developers will also need to disclose their data collection practices and policies, and to comply with the GDPR and other applicable laws and regulations.
- Data transfer and deletion for App Store users: Developers who transfer App Store user data to their own websites or app marketplaces will need to obtain the user’s consent before doing so, and to inform the user of the destination and purpose of the data transfer. Users will be able to revoke their consent at any time, and to request the deletion of their data. Developers will also need to comply with the GDPR and other applicable laws and regulations, and to respect the user’s right to be forgotten.
New User Controls and Disclosures
The last change that Apple is introducing is the ability for users to have more control and information over their apps and experiences on iOS, Safari, and the App Store. Users will be able to use new settings and features, such as:
- App Store settings: Users will be able to customize their App Store preferences, such as the language, region, and currency of the App Store, the frequency and type of notifications, and the level of parental controls and content ratings.
- Safari settings: Users will be able to customize their Safari preferences, such as the default search engine, the level of privacy and security protection, and the appearance and behavior of the browser.
- App settings: Users will be able to customize their app preferences, such as the level of immersion and background for spatial apps, the level of access and permission for data and sensors, and the level of feedback and support for app issues.
- App disclosures: Users will be able to access more information about their apps, such as the app’s identity and notarization status, the app’s payment method and terms, the app’s data collection and transfer practices, and the app’s ratings and reviews.
Apple says that these changes are designed to comply with the DMA’s requirements in the EU, while helping to protect EU users from the increased privacy and security threats that the regulation brings. Apple says that its priority remains creating the best, most secure possible experience for its users in the EU and around the world.