Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

MacRumors

macrumors bot
Original poster
Apr 12, 2001
67,805
38,417


Apple in early 2019 removed or restricted many popular screen time and parental control apps on the App Store due to their use of Mobile Device Management, or MDM, which the company said put user security and privacy at risk.

apple_screen_time_screen_icons.jpg

During today's antitrust hearing with the U.S. House Judiciary Antitrust Subcommittee, Cook was questioned about Apple's decision to remove the parental control apps, which came after the release of Apple's own Screen Time feature.

Cook said what Apple has said multiple times before, that the apps that used Mobile Device Management to allow parents to limit kids access to their devices placed data at risk. "We were worried about the safety of kids," Cook said.

Cook's statement was similar to what Apple said when the apps were removed: "These apps were using an enterprise technology that provided them access to kids' highly sensitive personal data. We do not think it is O.K. for any apps to help data companies track or optimize advertising of kids."

The Congresswoman questioning Cook asked about a specific app from the Saudi Arabian government that also used MDM, but Cook said he was not familiar with the app and that he would have to provide more data at a later date. When questioned about whether Apple applies different rules to different app developers, Cook once again said that rules are applied to all developers equally.

Cook was asked about the timing of the removal of the parental control apps, given that Screen Time had launched not too long before, a question that Cook largely skirted. He was asked why Phil Schiller had referred customers complaining about the removal of parental control apps to Screen Time, but Cook referenced the more than 30 parental control apps in the App Store and said there is "vibrant competition" in the parental control space in the App Store.

When pressed on whether Apple has the power to exclude apps from the App Store or remove competing apps, Cook returned to what he said during his opening statement, that there's a "wide gate" for the App Store, referring to the fact that there are more than 1.7 million apps available. "It's an economic miracle," said Cook. "We want to get every app we can on the App Store."

In tandem with the questioning on parental control apps, Cook was asked why, in 2010, Apple used the App Store to push publisher Random House into participating in the iBookstore, which Random House had declined to do. In a cited document, Apple iTunes chief Eddy Cue at the time emailed Steve Jobs that he "prevented an app from Random House from going live in the App Store," because Apple was aiming to get Random House to agree to an overall deal. Cook in response said there are "many reasons" an app might not make it through the approval process. "It might not work properly," he said.

appstoredocumentation.jpg
One of the documents shared by the subcommittee​

Apple's 2019 decision to limit parental control apps led the developers of those apps to call for a public API that would allow them to access the same features that are available in Screen Time after the MDM options were restricted, which Apple declined to provide.

Mobile Device Management, which the apps used, is a feature that is specifically designed for enterprise users to manage company-owned devices. Apple's position is that the use of MDM by consumer-focused apps has privacy and security concerns that have been referenced in App Store guidelines since 2017.

Rather than providing an API, Apple ultimately decided to allow parental control app developers to use Mobile Device Management for their apps, with stricter privacy controls that prevent them from selling, using, or disclosing data to third parties. Apps must also submit an MDM capability request that evaluates how an app will use MDM to prevent abuse and to ensure no data is shared. MDM requests are re-evaluated each year.


Article Link: Tim Cook Questioned on Apple's 2019 Ban on Parental Control Apps Using Mobile Device Management
 
Last edited:
The Congresswoman questioning Cook asked about a specific app from the Saudi Arabian government that also used MDM, but Cook said he was not familiar with the app and that he would have to provide more data at a later date.
He said the exact same thing last year when asked about Absher, weird how he still hasn't heard of the app after he said he'd look into it last year 😅
 
The only reason I'd like MDM is to prevent kids from turning off the VPN, which is how most of these apps work currently (such as Circle). My kids can too easily turn off or delete the VPN.
 
He said the exact same thing last year when asked about Absher, weird how he still hasn't heard of the app after he said he'd look into it last year 😅

I live in Saudi Arabia, and Absher doesn’t use MDM, which is why his response may technically be true. Absher uses other mechanisms.
 
anyone find out what this Saudi Arabia app is? it sounded like she chose the most obscure app to throw Tim off.
 
I live in Saudi Arabia, and Absher doesn’t use MDM, which is why his response may technically be true. Absher uses other mechanisms.
Didn't know that it doesn't use MDM but doesn't really matter.
She asked "Another app that used the same tool is called Absher, do you recall what Apple's position was regarding that application" and Tim's response was that he "is not familiar with that app". There's no way in hell that Tim Cook "is not familiar with that app".
The "I'm not familiar with that app but will look into it" is the same response he always gives when asked about Absher.
 
Didn't know that it doesn't use MDM but doesn't really matter.
She asked "Another app that used the same tool is called Absher, do you recall what Apple's position was regarding that application" and Tim's response was that he "is not familiar with that app". There's no way in hell that Tim Cook "is not familiar with that app".
The "I'm not familiar with that app but will look into it" is the same response he always gives when asked about Absher.

Oh, there's no doubt that every tech CEO operating in Saudi Arabia is aware of the app and its functions.
 
  • Like
Reactions: Hedby and Huck
He said the exact same thing last year when asked about Absher, weird how he still hasn't heard of the app after he said he'd look into it last year 😅

He’s the CEO of Apple and you expect him to know some fine details about an app from a third world country that probably generates a rounding error in revenue? Maybe he doesn’t remember the last time he blew his nose either.
 
He’s the CEO of Apple and you expect him to know some fine details about an app from a third world country that probably generates a rounding error in revenue? Maybe he doesn’t remember the last time he blew his nose either.

Not sure why Saudi being a 3rd world country matters.

But maybe like me he wasn't aware of an app called absher in the context of screentime type parental control for determining how long a child can play games.

If the discussion was around the topic of human rights I suspect he would easily have recalled the app in question.
 
I feel that people who want MDM in the hands of third parties don't really understand what MDM can do.

Here's a list:

That's just modes. There are also commands that can be issued to MDM devices (including wipe device).
You may be unaware, but MDM is back in the hands of same 3rd party devs who had their apps removed. Apple reversed their decision back in June. The devs wanted Apple to release a public API for Screen Time. Apple said, "how 'bout we just let you go back to using MDM?"

That "what about the kids" really didn't amount to much.
 
  • Like
Reactions: nickgovier
You may be unaware, but MDM is back in the hands of same 3rd party devs who had their apps removed. Apple reversed their decision back in June. The devs wanted Apple to release a public API for Screen Time. Apple said, "how 'bout we just let you go back to using MDM?"

That "what about the kids" really didn't amount to much.
Got a link to back that up? The licensing for MDM says specifically that it’s for distributing software within a corporation. The fact that they were enrolling other people’s devices in a service designed for corporate owned devices and distributing device profiles is really shady. That doesn’t really sound like something Apple would encourage them to do.
 
Got a link to back that up? The licensing for MDM says specifically that it’s for distributing software within a corporation. The fact that they were enrolling other people’s devices in a service designed for corporate owned devices and distributing device profiles is really shady. That doesn’t really sound like something Apple would encourage them to do.
Here ya go. It was widely reported on most Apple-centric sites, including right here on MR. https://www.macrumors.com/2019/06/04/apple-lets-parental-apps-use-mdm-strict-privacy/
 
  • Like
Reactions: nickgovier
Apple's ScreenTime is utter crap, just a nod to parental control. I often wonder if they actually consulted parents?
At a minimum, one should be able to set multiple 'downtimes' during the day and what is really needed is a total lockdown on Macs and phone so kids can't even log in at set times. And much much finer-grained control on individual apps.
 
You may be unaware, but MDM is back in the hands of same 3rd party devs who had their apps removed. Apple reversed their decision back in June. The devs wanted Apple to release a public API for Screen Time. Apple said, "how 'bout we just let you go back to using MDM?"

That "what about the kids" really didn't amount to much.

Please, READ the article. I'll give you a hint, what you just said is referenced at the very end.
 
Not the same conditions however.
Did you look at the new conditions? The new conditions don't change anything for the devs in question. Apple said MDM could be used to abuse privacy of kids data. Apple didn't say the devs were using MDM that way. Afaict, Apple never accused anyone of doing that. They posed a hypothetical worst case scenario (what about the kids) to emphasize the point that MDM has the potential for abuse. Go back and look at all the quotes from Apple. Every single quote I found stated "could be" abused, not "was being" abused. I think if a dev was abusing MDM to monetize kids data Apple would have dropped the hammer on them pdq.

Operationally, if a dev wasn't monetizing kids data (Apple never said any dev was doing that), they could just go back to business as usual regarding MDM... with the added bonus of Apple opening up a VPN API for them to use.

Nothing tangible changed.
 
Did you look at the new conditions? The new conditions don't change anything for the devs in question. Apple said MDM could be used to abuse privacy of kids data. Apple didn't say the devs were using MDM that way. Afaict, Apple never accused anyone of doing that. They posed a hypothetical worst case scenario (what about the kids) to emphasize the point that MDM has the potential for abuse. Go back and look at all the quotes from Apple. Every single quote I found stated "could be" abused, not "was being" abused. I think if a dev was abusing MDM to monetize kids data Apple would have dropped the hammer on them pdq.

Operationally, if a dev wasn't monetizing kids data (Apple never said any dev was doing that), they could just go back to business as usual regarding MDM... with the added bonus of Apple opening up a VPN API for them to use.

Nothing tangible changed.
From the post link you provided.

True, there is no technology difference, except the TOS being spelled out.
 

Attachments

  • Capture.PNG
    Capture.PNG
    37.5 KB · Views: 122
Can someone please point out some of the parental control apps that use MDM in the best possible way? Screen time isn’t all that effective. I’d be interested in something better for managing my kids devices.
 
That "what about the kids" really didn't amount to much.

Thanks for the info. The argument against MDM is not so much "what about the kids" as "what about everyone."

Hopefully they have a plan for the future, because trusting a third party with MDM privileges remains insane.
 
  • Like
Reactions: ader42
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.