Data-hungry apps, third-party cookies, and hackers often come to mind when you think about the biggest dangers to user privacy. But according to Apple CEO Tim Cook, there’s another threat that deserves the public’s attention: app sideloading.
On Tuesday, Cook used his keynote speech at the IAPP’s global privacy summit to criticize legislative efforts to require Apple to adopt app sideloading for iPhones.
“Proponents of these regulations argue that no harm would be done simply by giving people a choice. But taking away a more secure option will leave users with less choice, not more,” Cook said in his remarks.
According to Cook, app sideloading risks undermining all the efforts the company has spent to protect users of the iOS App Store, which is currently the only way iPhone can download third-party apps.
“Here in Washington and elsewhere, policymakers are taking steps in the name of competition that would force Apple to let apps onto iPhone that circumvent the App Store through a process called sideloading,” Cook said. “That means data-hungry companies would be able to avoid our privacy rules and once again track our users against their will.
“It would also potentially give bad actors a way around the comprehensive security protections we put into place, putting them in direct contact with our users,” he added.
To demonstrate his point, Cook pointed to how Android malware can circulate because the operating system permits sideloading. This enables Android users to install apps from third-party app stores and other sources, instead of only through the Google Play Store.
“Early in the pandemic, for example, there were reports of people downloading what appear to be legitimate COVID-tracing apps only to have their devices infected with ransomware. But these victims weren't iPhone users. Because the scheme directly targeted those who can install apps from websites that lack the App Store’s defenses,” Cook said.
His other worry is that the sideloading will unleash a number of rival iOS app stores built with fewer privacy safeguards in mind. This could make it easier for data-hungry companies to exploit consumers.
"Now I want to make something very clear to all of you. Apple believes in competition,” he added. “We value its role in driving innovation and pushing us all forward. And we appreciate that supporters of these ideas have good intentions. But if we are forced to let unvetted apps onto the iPhone, the unintended consequences will be profound. And when we see that, we feel an obligation to speak up.”
Cook’s stance is hardly a surprise. A year ago, Apple released a 16-page document that argued many of the same points. In November, Apple SVP Craig Federighi also spoke to an audience in Europe on the privacy dangers of app sideloading. Nevertheless, the EU is close to passing landmark legislation that could force Apple to allow app sideloading over iOS. US senators have also floated an antitrust bill that proposes doing the same.