Are all the apps from AppStore safe?

[jsx97]

I was told that Apple manually review source code of every app in AppStore so that there are no malware or scam apps. But now I'm not that sure.

There is, for example, Betternet VPN there, which doesn't seem to be a safe app:

Not all free VPN apps are scams. However, in any situation where VPNs claim they’re free, the VPN provider is making money some other way. Some of the best VPNs like Hola VPN for example, use a freemium model or a legitimate advertising revenue model. However, other free VPNs that have thousands of positive ratings on app stores—Betternet VPN for example—have a high malware presence. And many free VPNs are actually out-and-out scams, which is why a paid VPN provider is often a better bet for security than a free one. -- https://www.geoedge.com/university/malicious-vpn-scams/

> Betternet is a well-known VPN that offers both free and paid versions. Despite its renown, Betternet VPN has a very troubling history. As we’ll explain further in this Betternet VPN article, a team of researchers caught Betternet embedding malware and tracking libraries in their VPN apps. -- https://restoreprivacy.com/vpn/reviews/betternet/

My questions:

- Is it true that Apple manually review source code of every app in AppStore?
- Are all the apps from AppStore safe?

 

[cthompson94]

Apple does go through and screen apps, but it is more than likely a algorithm that looks for certain things and upon being flagged a human takes a closer look. (I am somewhat guessing on this as I know that not literally every single app is looked at manually) Even if every single app is looked at manually that doesn't mean perfection since that person is human too and finding malicious code in every single app what is changing on a constant basis would be impossible. The Appstore is just like any other hub for apps/programs/games/etc. just take a moment look at rating/reviews maybe even a quick google search if you are really uneasy, look through the app summary. The App Store is not perfect, but you are more likely to not run into issues especially for the more lesser known apps/programs

Any store that offers 3rd party players will run into this issue though, Google has the same problem, Steam will have malicious games that appear, even Amazon has a lot of fake products or horribly copied products, I have heard some similar stories with Walmart 3rd party sellers via the website. It is going to happen, just use common sense and never 100% trust anything.

 

[rpmurray]

Apple does not see the source code. They run the app for five minutes and if it doesn't do anything malicious then it passes. A lot of scam apps have passed the review process. You occasionally see stories about them here on MacRumors when Apple does a periodic sweep to make it look like they're taking action. Reporting scam apps to Apple does no good until they are shamed into removing them when the news outlets start printing stories about them.

 

[jsx97]

Apple does not see the source code. They run the app for five minutes and if it doesn't do anything malicious then it passes. A lot of scam apps have passed the review process. You occasionally see stories about them here on MacRumors when Apple does a periodic sweep to make it look like they're taking action. Reporting scam apps to Apple does no good until they are shamed into removing them when the news outlets start printing stories about them.

Wow, that's interesting. Maybe you remember some of these stories?

 

[rpmurray]

Wow, that's interesting. Maybe you remember some of these stories?

Scam ChatGPT apps are flooding the Mac App Store

Pig-butchering scam apps sneak into Apple’s App Store and Google Play

Crypto scam apps infiltrate Apple App Store and Google Play

 

[ignatius345]

I'd be especially cautious of VPNs. By definition, they insert themselves between you and every website you visit, so do your homework and find one you trust!