iOS 跟踪透明度:何时允许、何时拒绝应用跟踪
应用跟踪透明度提示的决策指南:何时跟踪合理、何时拒绝、安装后如何审计跟踪。
Reading series · 2/8
阅读系列 · 2/8
Privacy labels & permissions
隐私标签与权限
Read privacy labels, refuse risky prompts, and keep signup hygiene tight.
读懂隐私标签,拒绝高风险权限,并保持注册卫生。
Series hub 系列枢纽- 1 Reading App Privacy Labels and Permissions 如何阅读 App 隐私标签和权限
- 2 iOS Tracking Transparency: When to Allow and When to Deny App Tracking iOS 跟踪透明度:何时允许、何时拒绝应用跟踪
- 3 How to Read App Store Privacy Labels Like an Auditor 如何像审计员一样阅读 App Store 隐私标签
- 4 A Decision Guide for iOS Permission Prompts iOS 权限弹窗决策指南
- 5 An iOS Permission Prompt Decision Tree for Daily Apps 面向日常 App 的 iOS 权限弹窗决策树
- 6 How to Spot iOS Subscription Traps: Five Permissions You Should Not Grant Casually 如何识别 iOS 订阅陷阱?这 5 个权限千万别乱给
- 7 How to Use Hide My Email for Safer App Signups 如何用 Hide My Email 更安全地注册 App
- 8 Hide My Email, App Signups, and Long-Term Account Hygiene on iOS 隐藏邮件地址、App 注册与 iOS 长期账号卫生
Understanding What App Tracking Transparency Actually Asks You
Starting with iOS 14.5, any app that wants to track you across other companies apps and websites must present a system-level prompt asking for your permission. The prompt says: "Allow [App Name] to track your activity across other companies apps and websites?" with two buttons: Ask App Not to Track and Allow. When you tap Ask App Not to Track, the app receives a value of zero for your advertising identifier (IDFA), meaning it can no longer link your activity across apps. The app still functions normally for its core purpose; tracking is separate from basic functionality. When you tap Allow, the app receives a unique device identifier it can use to build a profile of your behavior across other apps and websites that participate in the same advertising network. The prompt appears only once per app; if you dismiss it, the system defaults to Not Tracking after a brief period. Understanding this binary choice is the foundation for every decision in this guide. Note that the prompt wording may vary slightly by iOS version, but the underlying mechanism has remained consistent through iOS 17 and later.
理解应用跟踪透明度实际在问什么
从 iOS 14.5 开始,任何想要跨其他公司应用和网站跟踪你的应用都必须呈现一个系统级提示请求你的许可。提示显示:"允许 [应用名称] 跨其他公司的应用和网站跟踪你的活动吗?"有两个按钮:"要求应用不跟踪"和"允许"。当你点击"要求应用不跟踪",应用收到广告标识符 (IDFA) 的值为零,意味着它无法再跨应用关联你的活动。应用的核心功能仍然正常运作;跟踪与基本功能是分开的。当你点击"允许",应用收到一个唯一设备标识符,可用于跨参与同一广告网络的其他应用和网站构建你的行为画像。提示每个应用只出现一次;如果你忽略它,系统会在短暂时间后默认为"不跟踪"。理解这个二选一是本指南每个决策的基础。
When Allowing Tracking Is Justified: Social Login and Cross-Device Sync
There are a small number of scenarios where allowing tracking serves your interest rather than the advertiser. If you use an app that relies on a shared advertising SDK to sync your preferences across devices (some fitness or reading apps do this), tracking may be necessary for the cross-device experience to work. Social media apps that show you content from friends on other platforms may function better with tracking enabled because they can link your contacts across services. However, even in these cases, the benefit is to the app developer, not directly to you. A more defensible reason to allow tracking is if you actively want personalized ads because you are comparison shopping and find relevant ads helpful; in that case, allowing tracking for specific shopping apps may be worthwhile. The key is to allow tracking only for apps where you understand the specific benefit and to deny it for apps where the tracking serves no purpose you can identify. Never allow tracking out of a sense that the app will break without it; it will not.
何时允许跟踪是合理的:社交登录与跨设备同步
有少数场景下允许跟踪服务于你的利益而非广告商。如果你使用的应用依赖共享广告 SDK 来跨设备同步你的偏好(一些健身或阅读应用会这样做),跟踪可能是跨设备体验正常工作所必需的。显示你在其他平台好友内容的社交媒体应用可能在启用跟踪后运作更好,因为它们可以跨服务关联你的联系人。但即使在这些情况下,受益的是应用开发者而非你本人。一个更站得住脚的理由是如果你主动想要个性化广告,因为你正在比价购物并觉得相关广告有帮助;在这种情况下,为特定购物应用允许跟踪可能是值得的。关键在于只为你理解具体益处的应用允许跟踪,对无法识别跟踪用途的应用拒绝。绝不要出于"不允许应用就会坏掉"的感觉而允许跟踪;不会的。
When to Deny Tracking: Games, Utilities, and Apps With No Cross-App Need
Most apps do not need to track you across other companies apps to function. Games, flashlights, calculators, weather apps, and file converters have no legitimate reason to build a cross-app behavioral profile. If a game shows the tracking prompt, deny it; the game will still play, your scores will still save, and your in-app purchases will still work. Utilities like battery monitors, QR scanners, and document scanners similarly have no cross-app use case. If a calculator app asks to track you, that is a red flag that the app is monetizing your data rather than providing a tool. The default response for any app where you cannot identify a personal benefit from tracking should be Ask App Not to Track. You lose nothing; the app developer simply cannot sell your behavioral data to advertising networks. A useful mental model: if the app would work fine on an iPod Touch with no internet connection, it does not need to track you across the web. Even apps that do require internet, like a weather app fetching local forecasts, do not need cross-app tracking to deliver their core function. The weather app needs your location, not your advertising profile. Be especially suspicious of free apps that have no visible advertising and no subscription model; they are likely monetizing your data in the background through tracking, which is precisely why they want you to tap Allow.
何时拒绝跟踪:游戏、工具与无需跨应用的应用
大多数应用不需要跨其他公司应用跟踪你就能运作。游戏、手电筒、计算器、天气应用和文件转换器没有正当理由构建跨应用行为画像。如果游戏显示跟踪提示,拒绝它;游戏仍然可以玩,分数仍然会保存,应用内购买仍然有效。电池监控、二维码扫描器和文档扫描器等工具同样没有跨应用用例。如果计算器应用要求跟踪你,这是一个危险信号,说明该应用在变现你的数据而非提供工具。对于任何你无法识别跟踪个人益处的应用,默认回应应为"要求应用不跟踪"。你不会失去任何东西;应用开发者只是无法将你的行为数据出售给广告网络。一个有用的心智模型:如果该应用在没有互联网的 iPod Touch 上也能正常工作,它就不需要跨网络跟踪你。
Auditing Which Apps Have Tracking Permission After Installation
iOS provides a central place to review and change tracking permissions for all apps at once. Go to Settings > Privacy & Security > Tracking. This screen lists every app that has requested tracking permission and shows whether you allowed or denied it. You can toggle any app on or off here; changes take effect immediately. This is also where you find the global Allow Apps to Request to Track switch at the top. If you turn this off, no app can even present the tracking prompt; they all receive a zero IDFA automatically. This is the strongest privacy setting, but it means you cannot selectively allow tracking for apps where you want it. A practical approach is to keep the global switch on, deny tracking for every app by default, and then selectively enable it for the rare app where you see a personal benefit. Review this list monthly, especially after installing new apps, to catch any tracking permissions you may have granted hastily during setup. If you notice an app you uninstalled still appears in the tracking list, the permission remains active until you toggle it off or the app data is fully removed from the device. Toggling off tracking for an uninstalled app ensures no residual tracking occurs.
安装后审计哪些应用具有跟踪权限
iOS 提供了一个集中位置来一次性审查和更改所有应用的跟踪权限。进入"设置">"隐私与安全性">"跟踪"。此页面列出了每个请求过跟踪权限的应用,并显示你允许还是拒绝了。你可以在此切换任何应用的开或关;更改立即生效。这里还有顶部的"允许应用请求跟踪"全局开关。如果你关闭它,任何应用都无法显示跟踪提示;它们都自动收到零 IDFA。这是最强的隐私设置,但意味着你无法为想要的应用选择性允许跟踪。一个实用的方法是保持全局开关开启,默认拒绝每个应用的跟踪,然后为你看到个人益处的罕见应用选择性启用。每月审查此列表,尤其在安装新应用后,以捕获你在设置过程中可能匆忙授予的跟踪权限。
Limiting Ad Tracking Without Relying on the Per-App Prompt
Beyond the per-app ATT prompt, iOS has a system-wide setting called Personalized Ads that controls whether Apple delivers personalized ads in the App Store, Apple News, and Stocks apps. Go to Settings > Privacy & Security > Apple Advertising and toggle off Personalized Ads. This does not reduce the number of ads you see; it just means the ads are not tailored to your behavior. Apple uses on-device processing for ad personalization, meaning your data does not leave the device, but turning it off adds another layer. Additionally, consider going to Settings > Privacy & Security > Safety Check to review which apps have access to your photos, contacts, location, and microphone. Tracking is not limited to the ATT framework; apps can infer identity through other permissions, such as accessing your contacts list which contains unique identifiers. A comprehensive privacy audit reviews both ATT permissions and the broader permission landscape, because resourceful apps can link your identity through contact access even without IDFA.
不依赖单应用提示来限制广告跟踪
除了单应用 ATT 提示外,iOS 有一个名为"个性化广告"的系统级设置,控制 Apple 是否在 App Store、Apple News 和股票应用中投放个性化广告。进入"设置">"隐私与安全性">"Apple 广告"并关闭"个性化广告"。这不会减少你看到的广告数量;只是意味着广告不会根据你的行为定制。Apple 使用设备端处理进行广告个性化,意味着你的数据不离开设备,但关闭它增加了另一层保护。此外,考虑进入"设置">"隐私与安全性">"安全检查"来审查哪些应用可以访问你的照片、通讯录、位置和麦克风。跟踪不限于 ATT 框架;应用可以通过其他权限推断身份,例如访问包含唯一标识符的通讯录列表。全面的隐私审计同时审查 ATT 权限和更广泛的权限格局,因为精明的应用即使没有 IDFA 也能通过通讯录访问关联你的身份。
Recognizing Apps That Track Without the Prompt via Fingerprinting
Some apps attempt to track you without triggering the ATT prompt by using fingerprinting techniques. Fingerprinting collects device characteristics like screen resolution, battery level, language, timezone, and sensor data to create a unique identifier that does not require IDFA. Apple considers this a violation of its policies and has been progressively blocking these signals in iOS updates, but some apps still attempt it. Signs of fingerprinting include an app requesting unusual combinations of permissions (e.g., a flashlight asking for motion sensor access) or an app that works slowly on first launch while it collects device data. Apple rejects apps caught using fingerprinting when reported, but detection is hard. To protect yourself, deny all non-essential permissions and use the Privacy Report feature in Safari (Settings > Safari > Privacy Report) to see which trackers are being blocked. If an app behaves differently or shows oddly specific ads after you denied tracking, it may be fingerprinting; consider uninstalling it and reporting it to Apple through the App Store listing.
识别通过指纹识别绕过提示进行跟踪的应用
一些应用尝试通过指纹识别技术在不触发 ATT 提示的情况下跟踪你。指纹识别收集屏幕分辨率、电池电量、语言、时区和传感器数据等设备特征,创建不需要 IDFA 的唯一标识符。Apple 认为此行为违反其政策,并在 iOS 更新中逐步封堵这些信号,但一些应用仍在尝试。指纹识别的迹象包括应用请求不寻常的权限组合(如手电筒要求运动传感器访问)或应用首次启动时运行缓慢同时收集设备数据。Apple 在被举报时会拒绝使用指纹识别的应用,但检测困难。为保护自己,拒绝所有非必要权限,并使用 Safari 中的隐私报告功能("设置">"Safari">"隐私报告")查看哪些跟踪器被阻止。如果某个应用在你拒绝跟踪后行为不同或显示异常精准的广告,它可能在使用指纹识别;考虑卸载它并通过 App Store 页面向 Apple 举报。
Talking to Family Members About Tracking Decisions on Shared Devices
If you manage shared iPads or set up iPhones for children, the tracking prompt will appear for each app they install. Children and less technical family members tend to tap Allow because the prompt is easy to dismiss and the consequences are invisible. Set a family rule: always tap Ask App Not to Track. To enforce this on a child device managed through Family Sharing, you can use Screen Time restrictions to prevent app installation entirely or require approval for new apps via Ask to Buy. For teenagers who install their own apps, explain that tapping Allow does not improve the app performance; it only lets the developer sell their data. Show them the Tracking settings screen so they can review what they have already permitted. If a family member already allowed tracking on dozens of apps, go through the list together and toggle off tracking for each one. This is also an opportunity to discuss why some ads seem to follow you across apps; it is usually because tracking was allowed somewhere in the chain.
与家庭成员讨论共享设备上的跟踪决策
如果你管理共享 iPad 或为儿童设置 iPhone,每个他们安装的应用都会出现跟踪提示。儿童和技术水平较低的家庭成员倾向于点击"允许",因为提示容易被忽略且后果不可见。设定家庭规则:始终点击"要求应用不跟踪"。要在通过家庭共享管理的儿童设备上强制执行,你可以使用"屏幕使用时间"限制完全禁止应用安装,或通过"购买前询问"要求新应用需经批准。对于自行安装应用的青少年,解释点击"允许"不会改善应用性能;只是让开发者出售他们的数据。向他们展示"跟踪"设置页面,以便审查已授予的权限。如果家庭成员已为数十个应用允许了跟踪,一起逐个关闭每个应用的跟踪。这也是讨论为什么某些广告似乎跨应用跟随你的机会;通常是因为链条中某处允许了跟踪。
Resetting Tracking Permissions Globally When Too Many Apps Were Granted
If you have been allowing tracking for months and realize you want to reset everything at once, iOS does not offer a single reset button per app, but you can reset all privacy permissions globally. Go to Settings > General > Transfer or Reset iPhone > Reset > Reset Location & Privacy. This resets all location and privacy permissions to their default state, meaning every app will ask again for tracking permission, location access, camera, microphone, and contacts. This is a nuclear option; it affects all apps, not just tracking, so be prepared to re-grant essential permissions like Maps location or Camera access for your photography apps. A less drastic approach is to go to Settings > Privacy & Security > Tracking and manually toggle off tracking for each app in the list. This takes more time but preserves your other permission settings. If you have dozens of apps with tracking enabled, the manual approach may take 10 minutes but gives you the chance to reconsider each app individually. Some users find it valuable to reset permissions every six months as a way to audit which apps actually need each permission; apps that you have not opened since the last reset will not ask again.
当过多应用已获授权时全局重置跟踪权限
如果你已允许跟踪数月并意识到想一次性重置所有内容,iOS 没有提供单应用重置按钮,但可以全局重置所有隐私权限。进入"设置">"通用">"传输或还原 iPhone">"还原">"还原位置与隐私"。这会将所有位置和隐私权限重置为默认状态,意味着每个应用都会再次请求跟踪权限、位置访问、相机、麦克风和通讯录。这是一个极端选项;它影响所有应用,不仅限于跟踪,所以准备好重新授予基本权限如地图位置或摄影应用的相机访问。一种不那么激进的方法是进入"设置">"隐私与安全性">"跟踪"并手动逐个关闭列表中每个应用的跟踪。这需要更多时间但保留你的其他权限设置。如果数十个应用启用了跟踪,手动方法可能需要 10 分钟,但让你有机会逐个重新考虑每个应用。一些用户发现每六个月重置一次权限是审计哪些应用真正需要每个权限的有效方式;自上次重置以来未打开过的应用不会再次请求。
Next in this series · 3/8
本系列下一篇 · 3/8
How to Read App Store Privacy Labels Like an Auditor
如何像审计员一样阅读 App Store 隐私标签
Keep the same research path so related decisions stay consistent.
沿同一研究路径继续,相关决策会更连贯。