3 ms·

This is very simple. It was done via the advertising identifier (IDFA). If you don’t reset it between uninstalling and reinstalling, you’re still the same perso

This is very simple. It was done via the advertising identifier (IDFA). If you don’t reset it between uninstalling and reinstalling, you’re still the same person. This also applies to keychain data. If you uninstall an app, it’s data is still kept in the keychain, and is accessible again after reinstalling. Not sure how you could clear this as a user. This isn’t fingerprinting. It is explicitly allowed by Apple. As an aside, the new DeviceCheck system cannot be used for fingerprinting. All it could have done is to flag your device as fraudulent pre-uninstall if they thought you were problematic. DeviceCheck allows for the storage of exactly two bits of data - literally four possible values. It was certainly not done with this.

stopwhispering2 9y ago
As you can see in my other comment, I think this is done by other “malicious” Apps which unfortunately aren’t getting the same attention as Uber. Apple Support refuses to acknowledge that any App data is left on your phone after uninstalling. Is there anything that can be done to clean the keychain?
- BillinghamJ 9y ago
  I was curious about the keychain issue too actually - as it seemed strange for Apple to just leave that vector in place with no protection. Turns out they did actually change it eventually. As of iOS 10.3, the relevant keychain data is cleared when the apps which have access are uninstalled. Thus, if ALL Uber apps on the OP’s phone were uninstalled, the only known/allowed method is via the IDFA. This is most likely since Uber has promised to follow the rules. If any other Uber apps were still installed though, that would also have maintained the unique identifier. Apps made by the same “team” can share keychain data (keychain access groups), and there is another ID - the vendor identifier (IDFV) which will only reset if all apps made by that vendor have been uninstalled. It may even be possible for apps to share files if under the same team ID. So if you know what you’re doing (resetting the IDFA), it’s pretty easy to prevent. Just not many people do.

stopwhispering2 9y ago

As you can see in my other comment, I think this is done by other “malicious” Apps which unfortunately aren’t getting the same attention as Uber. Apple Support refuses to acknowledge that any App data is left on your phone after uninstalling. Is there anything that can be done to clean the keychain?

BillinghamJ 9y ago
I was curious about the keychain issue too actually - as it seemed strange for Apple to just leave that vector in place with no protection. Turns out they did actually change it eventually. As of iOS 10.3, the relevant keychain data is cleared when the apps which have access are uninstalled. Thus, if ALL Uber apps on the OP’s phone were uninstalled, the only known/allowed method is via the IDFA. This is most likely since Uber has promised to follow the rules. If any other Uber apps were still installed though, that would also have maintained the unique identifier. Apps made by the same “team” can share keychain data (keychain access groups), and there is another ID - the vendor identifier (IDFV) which will only reset if all apps made by that vendor have been uninstalled. It may even be possible for apps to share files if under the same team ID. So if you know what you’re doing (resetting the IDFA), it’s pretty easy to prevent. Just not many people do.