It's kind of bullshit too though that you are required to add an apple login.
On your iOS device, you are logged in with one Apple ID at a time. This Apple identity is the one that makes In-App Purchases ("IAPs"). So if a user makes a purchase in your app signed in as "bob", and then logs out of your app and signs in as "alice", they still have that IAP. Therefore, the simplest, most correct way to have an app with IAPs and third party auth is to exclusively use Sign In With Apple, because Sign In With Apple is tied to your device's currently signed in Apple ID and all of its IAPs.
https://stackoverflow.com/questions/63272699/how-do-you-hand...
I considered removing my other third party auth methods but have kept them in to see how it goes... :|
It's pretty stupid.
AFAIK apple's private relay only accepts mail signed by the corresponding developer. In other words, no third party can use the private relay address.
Is an app allowed to prompt for a real email address if it uses Sign in with Apple?
It can ask, but cannot require it.
Apple forces you to use in-app purchases, Apple forces you to stick with their crippled browser ecosystem, it has no compatibility outside of Apple. Their protocols for messaging and device interop are closed-source; they have tech that tracks all your devices + these new beacons, and all your devices are those beacons too.
You are more heavily tracked under Apple than you are in any other system. Did you think your iphone would be a location tracker for another device?
That I can sign up to TikTok with "Sign in with Apple", with an auto-generated Apple Privacy email address and literally no other information, is quite amazing and useful.
This is disclosed in their own transparency report (FISA).
This isn't optional; Apple has to provide data on any user account the USG demands of them, without a search warrant.
Your trust in them is misplaced.
The USA IC can and will.
I care far more about companies like Google and Facebook taking my information and using it in tracking and advertising, or selling it to whomever wants to pay for it for whatever reason to build a profile about me and using that to take advantage of me.
On that front, I trust Apple far more than any of the other options. They’re using it as a competitive advantage and it’s working.
Or how about this, be able to install free apps without any apple ID!
And in terms of NSLs, they only turned over data for under 500 of them so far this year (and it could be a lot fewer since the bucket size is 1-500).
Lots of people seem to use Sign In With Apple, though. They make it really nice for the user. The email relay thing is pretty neat.
The thing that troubles me with OAuth is that if you don't provide apps with some other way to sign in and you lose access to you OAuth account, you lose access to all your applications.
Which means you cant add Apple Login, and that also means the end of your App.
Only predatory devs would complain against this rule, and I won’t miss them.