Apple's tracking prompt made 96% of US iPhone users refuse cross-app ad tracking

iOS 14.5 shipped on April 26, 2021 with App Tracking Transparency (ATT): any app that wanted to read the device's advertising identifier — the IDFA used to follow activity across apps and websites — had to ask first and receive permission. Within two weeks, analytics firm Flurry found just 4% of US iPhone users authorized tracking in a 2.5 million daily-active-user sample, and 12% worldwide in a 5.3 million sample; the rates stayed stable between 2–5% and 11–13%.

The result shook a market built on silent defaults. For a decade the IDFA had let ad networks follow users across other companies' apps and websites, feeding a mobile advertising industry Flurry sizes at $189 billion. ATT flipped the arrangement: the app itself has to interrupt the user, ask for permission it does not strictly need, and accept that most users will say no. Apple also gave iPhone owners a system-level switch that stops apps from requesting at all, so refusal can happen once instead of app by app.

Facebook, the loudest opponent, had run full-page newspaper ads attacking ATT and told investors the impact would be manageable. A week after release it reversed tone: it began showing its own screen before Apple's prompt, telling users they must enable tracking to help keep Facebook and Instagram free of charge. The about-face made visible how much of the free-app economy rested on a permission most users were now declining.

The early trend looked durable. Flurry's weekday updates kept US authorization near 4% and worldwide near 12%, and the personalized-ads market braced for a significant structural shift. On Hacker News the report drew 412 points and 353 comments; readers pointed out that much of the 96% never made an active choice — once tracking was no longer the default, doing nothing was already a refusal.

Make cross-app tracking opt-in at the OS level, and users will protect their privacy by doing nothing

Opt-in reverses the burden of proof: an app must earn a yes at the moment it asks, and most users tap no when the asker is the party that profits.

Doing nothing equals refusing: with the prompt declined or never shown, the IDFA stays off, so the 96% never needed to understand ad technology.

The OS enforces the rule uniformly: no third-party app or ad network can negotiate around the system prompt, whatever its market power.

It was framed as a user-rights feature rather than an industry rule, which made the strategic blow to ad networks hard to oppose in public.

Large daily samples made the outcome measurable within two weeks, turning a policy change into a documented market-level fact.

A platform owner can change an industry's default without banning a practice: put consent where users pay attention, make 'no' cost nothing, and inertia does the rest.

Flurry's daily updates through May 2021 kept US opt-in near 4% and worldwide near 12%, and ATT became the baseline for mobile consent; platforms dependent on the IDFA rebuilt attribution around first-party data. By 2026 the asymmetry drew regulators: Apple agreed with Germany's regulator to make its ATT prompt less discouraging and to align consent requests for its own services with third-party ones, and it faced a £2 billion ($2.7 billion) London claim accusing it of applying stricter tracking rules to third-party apps than to its own advertising services.