Hacker News new | ask | show | jobs
by nomilk 38 days ago
But a single app can request to know the presence of up to 50 apps, right?

And a data broker/aggregator can purchase such data from many (e.g. thousands) of apps and aggregate it, then sell it.

2 comments

Yes indeed, the limit is 50 which is of course enough to fully profile "regular people" who only have a handful of apps. Also don't forget, Meta/Google/TikTok/WhateverPalantir are updated weekly which means they can tweak their LSApplicationQueriesSchemes list and cover even more apps if they want to.
Are there legitimate reasons why an App should know I have installed?
Interoperability mainly - if you want to deep link into a specific app or show a list of apps to open.

These days we have more modern and privacy protecting APIs for making content available to the system or other apps… but that doesn’t stop the profilers.

Back before Apple allowed users to set the default browser I had a feature in my app that presented a list of installed browsers when a user opens an external link, giving them the option to choose where it opened.
Android gives me that option at the OS level.
E.g if gmail knows that you have maps or chrome it can deep link you into a particular view instead of opening safari.
At the OS level, Android gives me the option to open links in the corresponding app.
So does iOS, but this is a different feature than what we’re discussing here.

Since Android 11, Google copied the iOS model except Android is a bit more permissive and so you get a bit less privacy out of the box.

Surely there should be a way to enable deep links with a fallback to Safari without needing Gmail to know what apps I’ve got installed
People think LinkedIn is scummy (they are) for scanning for browser extensions, but what Apple is allowing is even worse.