Apple Does Deep Dive Into Security Protections and Risks With Alternative App Marketplaces

Apple today published a whitepaper [PDF] detailing the privacy and security protections that it is implementing in the European Union to keep users as safe as possible while also complying with the requirements of the Digital Markets Act.

App Store vs EU Feature 2
As a recap, with the upcoming iOS 17.4 update, iPhone users in the European Union will be able to install apps through alternative app marketplaces rather than the App Store. Several companies are working on marketplaces, with Setapp and Epic Games confirming plans to offer an ‌App Store‌ alternative.

Apps installed through marketplaces are essentially "sideloaded" and are not subject to the standard ‌App Store‌ review process. In an effort to minimize the risk of malware and fraud, Apple has implemented a Notarization process that app marketplaces and the apps sold through those marketplaces must submit to.

Notarization includes both an automated scan and human review to ensure that apps do not contain malware, function as advertised, and do not engage in "egregious fraud" attempts. An app can't be installed on an ‌iPhone‌ using sideloading unless it is signed by Apple through Notarization, and Apple is requiring developers to have a Developer account and provide legitimate details like name, address, and phone number. Apps will need to explain why they need access to sensitive data like the microphone, camera, Face ID, health data, and more, and user consent will also be required for these functions to work after an app is installed.

What Notarization won't do is look at the content of apps. Apps installed through alternative marketplaces can have adult content, copyrighted content, drug-related content, and other features that would not be allowed in the ‌App Store‌. Apple will attempt to stop apps that impersonate other apps or that have undocumented features, but the company warns that sideloaded apps will not be as secure as those installed through the ‌App Store‌.

Alternative app marketplaces need to adhere to baseline criteria that requires them to commit to monitoring for and removing malicious apps and providing support to users. Refunds, for example, will need to be provided by the app marketplace because marketplaces use alternative payment methods rather than in-app purchases. Alternative payment methods are also accepted in ‌App Store‌ apps under the DMA.

European users who install an app outside of the ‌App Store‌ will be presented with an app installation sheet that provides the app name, developer name, app description, screenshots, and ratings. Sheets can be turned off for a marketplace in the Settings app, and they also disappear if a marketplace is set as the default store.

Similar disclosures are also offered up for apps that use alternative payment methods. Apple provides warnings that features like easy subscription cancelation and Ask to Buy are not available, and that there is no protection from predatory pricing.

Apple says that it has received numerous emails from European users and government agencies that are concerned with the risks of alternative app marketplaces, and Apple promises to "work tirelessly" to protect users "to the extent possible under the law." There is no way for users to opt out of the DMA changes, and Apple suggests that some people may have to use alternative apps against their will. Employers and schools may require an app that is only available through a marketplace, for example.

Much of Apple's whitepaper walks through the risks that ‌iPhone‌ users will need to contend with and the work that alternative app marketplace operators will need to do in order to keep users safe.

Notably, Apple says that the changes that it is making have been discussed with the European Commission, and there have been no concerns raised. The DMA does recognize the privacy risks associated with alternative app marketplaces, and Apple says it is aiming to do what it can to protect and educate users under the new guidelines.

‌iPhone‌ owners in the European Union who have additional concerns about alternative app marketplaces can read through Apple's full PDF to get a complete picture of the security and safety protections that Apple has put in place and the risks that still remain.

Popular Stories

apple wallet drivers license feature iPhone 15 pro

iPhone Driver's Licenses: These 17 U.S. States Offer Them or Will Later

Thursday June 19, 2025 11:28 am PDT by
In select U.S. states, residents can add their driver's license or state ID to the Wallet app on the iPhone and Apple Watch, providing a convenient and contactless way to display proof of identity or age at select airports and businesses, and in select apps. Unfortunately, this feature continues to roll out very slowly since it was announced in 2021, with only nine U.S. states and Puerto...
iPhone 16 Battery Life Feature

iOS 26's New Battery Life Mode Available Only on These iPhone Models

Saturday June 21, 2025 9:02 am PDT by
Last week, we reported that iOS 26 introduces an opt-in Adaptive Power Mode on the iPhone, alongside the existing Low Power Mode. Apple says that Adaptive Power Mode can make "small performance adjustments" when necessary to extend an iPhone's battery life, including slightly lowering the display brightness or allowing some activities to "take a little longer." The full description of...
iPhone 17 Pro Blue Feature Tighter Crop

iPhone 17 Pro Launching in Three Months With These 12 New Features

Saturday June 14, 2025 5:45 pm PDT by
The iPhone 17 Pro and iPhone 17 Pro Max are three months away, and there are plenty of rumors about the devices. Below, we recap key changes rumored for the iPhone 17 Pro models as of June 2025:Aluminum frame: iPhone 17 Pro models are rumored to have an aluminum frame, whereas the iPhone 15 Pro and iPhone 16 Pro models have a titanium frame, and the iPhone X through iPhone 14 Pro have a...
ios 26 call holding

iOS 26 Beta is Hiding a New Ringtone — Here's What It Sounds Like

Thursday June 19, 2025 7:25 pm PDT by
Apple is hiding a new ringtone within iOS 26. The new ringtone is an alternative version of the existing Reflection ringtone, which has been the default ringtone since the iPhone X was released in 2017. It was discovered within the code for the first developer beta of iOS 26, but it remains hidden, so you will not find it in the list of ringtones available in the Settings app for now. It...
apple watch ultra 2 new black

Apple Watch Ultra 3 Finally Coming After Two-Year Hiatus

Monday June 16, 2025 8:45 am PDT by
Apple will finally deliver the Apple Watch Ultra 3 sometime this year, according to analyst Jeff Pu of GF Securities Hong Kong (via @jukanlosreve). The analyst expects both the Apple Watch Series 11 and Apple Watch Ultra 3 to arrive this year (likely alongside the new iPhone 17 lineup, if previous launches are anything to go by), according to his latest product roadmap shared with...
iOS 18

Apple Releases iOS 18.6 Public Beta

Wednesday June 18, 2025 10:24 am PDT by
Apple today seeded the first betas of upcoming iOS 18.6 and iPadOS 18.6 updates to public beta testers, with the betas coming just a few days after Apple provided the betas to developers. Testers who have signed up for beta updates through Apple's beta site can download iOS 18.6 and iPadOS 18.6 from the Settings app on a compatible device by going to General > Software Update. When the...
General Spotify Feature

Spotify Preparing to Launch Long-Awaited Lossless Audio Tier on iPhone

Thursday June 19, 2025 1:46 pm PDT by
Spotify appears to be gearing up to launch its long-awaited lossless music tier. Chris Messina (via TechCrunch) and Spicetify (via The Verge) spotted new lossless references within the code for Spotify's desktop app and web player. With assistance from Aaron Perris, MacRumors has confirmed that the latest beta of the Spotify app for the iPhone also contains new lossless-related code....
Wi Fi WiFi General Feature

iOS 26 Adding Two New Wi-Fi Features, Allows AirDrop and AirPlay Alternatives

Saturday June 21, 2025 7:02 am PDT by
iOS 26 is gaining two new Wi-Fi features, including Captive Assist and Wi-Fi Aware. MacRumors contributor Aaron Perris discovered a reference to Captive Assist within the code for the first iOS 26 developer beta, but Apple has yet to enable the feature. It should be available by the time the software update is released later this year. In his Power On newsletter last month, Bloomberg's...
airpods 4 blue

Apple Offering Free AirPods — Here's How to Get Them

Tuesday June 17, 2025 6:33 am PDT by
Apple is running a new promotion that offers free AirPods to qualifying customers. Now through September 30, college and university students in the U.S., Canada, Mexico, and Singapore can receive free AirPods 4 when they purchase an eligible new Mac or iPad from Apple. AirPods Pro 2 are also available at a discount. If you do not want AirPods, the promotion also offers various other...

Top Rated Comments

krspkbl Avatar
17 months ago
But they side-load apps on Mac.

Side-loading isn't bad. Competition (different stores) isn't bad... unless you're an AAPL shareholder, of course.

Why do we need a "whitepaper" for a basic feature that every other popular modern OS supports (excluding iPadOS lol) ?

Nice try Apple.
Score: 30 Votes (Like | Disagree)
vegetassj4 Avatar
17 months ago
Luckily, these nice people sent me an alert on how to protect myself from sideload dangers:



Attachment Image
Score: 22 Votes (Like | Disagree)
icanhazmac Avatar
17 months ago

Side-loading isn't bad. Competition (different stores) isn't bad... unless you're an AAPL shareholder, of course.
A one stop shop isn't bad either. It is a unique, and sadly, one of a kind model that may get legislated out of existence.

Yes, we all have survived with the PC/Mac app procurement model but does that mean it is the best or that other types of models shouldn't exist? Personally, I wish the walled garden extended to the Mac.
Score: 19 Votes (Like | Disagree)
krspkbl Avatar
17 months ago

You're conveniently ignoring that Apple has said many times that macOS is a less secure platform because of side loading.

You're also ignoring the fact that even Google/Android inform their users of the risks of side loading, and Google even recently issued a statement advising users to NOT side load because of risks. If I remember correctly, Google is even testing BLOCKING downloads of apps, even if you confirm on the verification that you actually want to download that side loaded app.

Apple informing the user base of the risks of side loading isn't any different than what Google does. Save your fake outrage for something where it's actually warranted.
Yet people love their Macs and Android is a huge success. There are risks and people should be warned but I'd rather have the freedom to do what I want with my devices than have someone hold my hand and tell me they know what's best for me.

Millions of businesses across the world use Windows, pretty much every server runs Linux and Android smartphones which "sideload" apps. The actual feature and functionality of it is not the problem and iOS/iPadOS should implement it worldwide.

Apple is just scared and desperately trying to not lose money.
Score: 19 Votes (Like | Disagree)
iOS Geek Avatar
17 months ago

But they side load apps on Mac.

Sideloading isn't bad. Competition (different stores) isn't bad... unless you're an AAPL shareholder, of course.

Nice try Apple.
You're conveniently ignoring that Apple has said many times that macOS is a less secure platform because of side loading. It's actually why we aren't allowed to side load ANYTHING to our Macs at work. Because someone did once and it ****** up our entire system

You're also ignoring the fact that even Google/Android inform their users of the risks of side loading, and Google even recently issued a statement advising users to NOT side load because of those risks. If I remember correctly, Google is even testing BLOCKING downloads of apps, even if you confirm on the verification that you actually want to download that side loaded app. While the EU is forcing Apple to be more open like Google, Google is trying to impose limits like Apple does. Gee, maybe the ecosystem that allows it actually thinks it's not that great of a thing! Why else would they be trying to reign it in? Multiple stories about users getting scammed spring to mind.

Apple informing the user base of the risks of side loading isn't any different than what Google does. Save your fake outrage for something where it's actually warranted.
Score: 17 Votes (Like | Disagree)
Timo_Existencia Avatar
17 months ago
I want a modern OS that is closed. I've knowingly made that choice for reasons that are important and valuable to me.

I trust business to make critical decisions on privacy and safety in tech much more than I trust Government to make those decisions; or at least I trust Apple more than I trust the EU.

I would like Apple to allow me to close off Alternate App stores on my child's devices.

I appreciate those of you who want to live in an open os ecosystem.

But why do you insist on taking my choice away? Why do you empower governments to make these choices?
Score: 17 Votes (Like | Disagree)