Apple and Google Tighten Mobile App Controls Through Telemetry and Sideloading Limits

Apple introduced Personalized Collections in the App Store, a recommendation feature built on detailed user telemetry that researchers at Mysk said logs every tap, app usage pattern, downloads, and potentially behavioral signals such as typing speed. The researchers reported that this analytics collection cannot be disabled and that related records appear in Apple account data exports from privacy.apple.com, prompting criticism over the granularity of the data and the lack of an opt-in model for personalization.

Google separately outlined a stricter Android sideloading process called Advanced Flow for apps from unverified developers, adding several barriers including developer mode activation, anti-coaching checks, a device restart with reauthentication, biometric or PIN confirmation, and a mandatory 24-hour waiting period. Google said internet-sideloaded apps are linked to far higher malware rates than Play-distributed apps and plans to deliver the controls through Google Play Services, but the move has also raised concerns that the company is using security justifications to further centralize control over how users discover and install mobile apps.