Analytics that respect privacy

Platform & distribution Mid-level Swift 5.0+ iOS 17+ Reviewed By Alok Singh

Pick the fix

An analytics SDK links a device identifier with ad data from other companies' apps. What does the app need?

Options
Hint 1 of 1

Is the data linked with other companies' data?

Choose an answer, then open Show answer below to check it.

Show answer

Answer: A App Tracking Transparency permission before tracking, plus accurate privacy labels and manifest entries

Correct. That is tracking under Apple's rules.

Why not the others?
  • B Nothing, because the SDK does it. The app is responsible for its SDKs.
  • C Only a line in the privacy policy. ATT permission is required for tracking.
  • D Hash the identifier and skip ATT. Hashing doesn't change whether it's tracking.

30-second answer

Collect only the events you'll use, without personal data, and prefer aggregated or anonymous identifiers. Declare collected data in App Store privacy labels and the privacy manifest, including what your SDKs collect. If data is linked with other companies' data for ads, that is tracking and needs App Tracking Transparency permission. Give users a way to opt out and honour it.

Practise saying it · 45 s. No recording, just a timer

Explain privacy-respecting analytics.

Say your answer out loud, then check which of these points you covered:

  • Minimise
  • Labels and manifests
  • ATT for tracking
  • Opt-out

Deep dive

Privacy manifests declare data collection and required-reason API use.

SDKs must ship their own manifests and signatures.

Avoid fingerprinting; Apple forbids it whether or not ATT is granted.

Keep an event dictionary so analytics stays intentional.

Common mistakes

  • Logging emails or free text in events.
  • Assuming an SDK's collection isn't your responsibility.

Senior take & follow-ups

Seniors minimise data, declare it accurately and know where ATT applies.

Follow-up questions

Think of your answer first, then open the hint.

  1. What counts as tracking?

    Show hint

    Linking your app's data with other companies' data for ads or sharing it with data brokers.

  2. Who declares SDK data use?

    Show hint

    You, in privacy labels; SDKs also ship manifests.

Suggest a fix if something here is wrong or out of date.