Use Advertising Identifer for Fraud Detection/Security Purpose

Hi,

Regarding AppTrackingTransparency framework, on https://developer.apple.com/app-store/user-privacy-and-data-use/ , it is mentioned that


You may track users without obtaining user permission through the AppTrackingTransparency framework if it is for one of the following purposes:

  • When user or device data from your app is linked to third-party data solely on the user’s device and is not sent off the device in a way that can identify the user or device.

  • When the data broker with whom you share data uses the data solely for fraud detection, fraud prevention, or security purposes, and solely on your behalf. For example, using a data broker solely to prevent credit card fraud.

Can I know the procedure for obtaining the advertising identifier without user permission? for example, if we are using it for security purposes.
Thank you.


Up vote post of peterwongth Down vote post of peterwongth
548 views
Posted by
peterwongth
Reply
Add a Comment

Accepted Reply

Hi there!

From the User Privacy and Data Use page you linked, you will need to receive the user’s permission through the AppTrackingTransparency framework to track them OR access their device’s advertising identifier. While it is true that you may track users without obtaining permission for the specific mentioned purposes (including security as you said), you may not access the advertising identifier without first obtaining user permission.

Depending on what your use case is, our DeviceCheck framework may be of assistance.
Posted by
--help
Up vote reply of --help Down vote reply of --help
Post marked as solved
Add a Comment

Replies

Hi there!

From the User Privacy and Data Use page you linked, you will need to receive the user’s permission through the AppTrackingTransparency framework to track them OR access their device’s advertising identifier. While it is true that you may track users without obtaining permission for the specific mentioned purposes (including security as you said), you may not access the advertising identifier without first obtaining user permission.

Depending on what your use case is, our DeviceCheck framework may be of assistance.
Posted by
--help
Up vote reply of --help Down vote reply of --help
Post marked as solved
Add a Comment