How to Measure App Installs Without Fingerprinting
Apple doesn’t allow fingerprinting even when users agree to tracking, and EU regulators treat IP-based tracking as access to the device. Here is what still measures installs with proof on iPhone and Android, and a plan that never has to guess.
The short answer
Fingerprinting in attribution means deciding which phone installed your app by comparing the signals it gives off: its IP address, its model, its OS version, the time of the tap. Nothing in those signals names your link. The result is a likely match with a score, not a proven one.
You can measure installs without it. Every install that arrives with proof stays measurable: a link that opens the app, the store referrer on Android, an ad platform’s own answer, Apple’s campaign totals. What you give up is a per-install guess for iPhone installs that started on the web. Teams in finance, health and kids’ apps usually decide that gap costs less than the guess.
Proof, or organic
A tap on your link
appy.to/springProof that names the link
- The link opened the app
- The store passed the link on
- The ad platform confirmed it
No proofBest guess
Why fingerprinting is off the table
Apple’s rule is the bluntest. Its developer guidance says you may not derive data from a device to identify it, and its documentation on required-reason APIs adds that fingerprinting isn’t allowed whether or not the user gave permission to track. Apple also warns that apps referencing SDKs that do it, attribution services included, may be rejected from the App Store.
In the EU, the EDPB’s guidelines on Article 5(3) of the ePrivacy Directive, adopted in their final version in October 2024, treat IP-based tracking, and an SDK that makes the device send information, as falling under the rule that requires consent unless an exemption applies.
Regulated categories add their own layer. COPPA counts persistent identifiers such as an IP address or a device ID as personal information. HHS guidance on tracking technologies, still published after a 2024 court ruling vacated one part of it, says data collected through a regulated entity’s mobile app, device IDs and IP addresses included, is generally protected health information.
None of this decides what your app must do; that is a question for your counsel. It does explain why teams that answer to regulators, patients or parents want attribution that never has to guess.
Proof or guess: where each method stands
Three numbers from the platforms’ own documentation
- days Google Play keeps the install referrer available to the app
- 90
- hours an Apple Ads attribution token stays valid
- 24
- first-time downloads before App Store Connect shows a campaign
- 5
days Google Play keeps the install referrer available to the app
hours an Apple Ads attribution token stays valid
first-time downloads before App Store Connect shows a campaign
Android: proof for almost every install from your links
Google Play gives every app its install referrer: the parameters of the link that sent the person to the store, with the time of the click and of the install. Google says the information stays available for 90 days and doesn’t change unless the app is reinstalled, so the app reads it once, on its first launch.
If your links pass a campaign or a click reference through to the Play Store, that first launch can read it back and credit the install with proof. Huawei AppGallery offers its own referrer for its installs, and some ad platforms pass their campaign data through the same channel. None of it needs a device signal.
iPhone: exact for opens, totals for new installs
On iPhone, a Universal Link that opens an installed app hands the app the exact link. That covers re-engagement, referrals between existing users and every campaign aimed at people who already have the app.
New installs are different. The App Store passes nothing from a tap on the web to the app’s first launch, so without fingerprinting there is no per-install link for most iPhone installs that started with a tap. Apple’s own tools fill part of the gap without identifying anyone.
Apple Ads: the AdServices framework gives the app a token, valid for 24 hours, that your server exchanges with Apple for the campaign, ad group and keyword behind the download.
App Store Connect campaign links: add your provider token and a campaign token to App Store links, and Apple reports impressions, product page views and downloads for each campaign. The numbers are totals. A campaign appears 24 hours after launch, once it has first-time downloads from at least five people.
Other ad networks: Apple’s AdAttributionKit sends them signed postbacks that, according to Apple, contain no user- or device-specific data. Apps don’t need tracking permission to use it.
What you can still measure
iPhone
- Exact: every link that opens the installed app
- Per install: Apple Ads downloads
- Totals: downloads per campaign in App Store Connect
- Ad networks: AdAttributionKit postbacks
- Everything else: organic
Android
- Exact: every link that opens the installed app
- Per install: Google Play and AppGallery installs from your links
- Per install: ad platforms that pass their own referrer
- Everything else: organic
A measurement plan that never guesses
Give every campaign its own link
One link per channel, creator, QR code and email, with UTM tags, so a credited install names its source.
Let your links open the app
Set up Universal Links and App Links, so people who already have the app land inside it with the link in hand.
Read the referrer on Android
On the first launch, read the Play install referrer once and send it with that launch.
Add Apple’s own sources on iPhone
Campaign tokens on App Store links for totals, and the Apple Ads token for paid search.
Report verified and organic apart
Don’t spread organic installs over campaigns with a model. A smaller number you can defend beats a bigger one you can’t.
Pay only on proof
Referral bonuses, partner fees and creator payouts go to verified installs only.
Write it into your privacy labels
Declare what your app and its SDKs send in App Store Connect and in Google Play’s Data safety form.
How Appy does it
Appy’s strict mode is that plan as one setting. An install goes to a link only with proof: the link opened the app, the store passed the link on, or an ad platform confirmed it. Strict mode never uses device signals to match an install, so there is no fingerprinting and no probabilistic matching. Installs without proof count as organic.
The trade-off is the one described above. In strict mode most new iPhone installs after a tap count as organic, while Apple Ads installs, links that open the app and Android installs from Google Play and AppGallery keep their link. Strict mode is part of Enterprise and is switched on app by app.
Read next
Sources, read on October 21, 2026
- Apple · User privacy and data usedeveloper.apple.com/app-store/user-privacy-and-data-use
- Apple · Describing use of required reason APIdeveloper.apple.com/documentation/bundleresources/describing-use-of-required-reason-api
- Apple · AdServices attributionToken()developer.apple.com/documentation/adservices
- Apple · App Store Connect Help, manage campaignsdeveloper.apple.com/help/app-store-connect/view-app-analytics/manage-campaigns
- Apple · AdAttributionKitdeveloper.apple.com/documentation/adattributionkit
- Android Developers · Play Install Referrer librarydeveloper.android.com/google/play/installreferrer/library
- EDPB · Guidelines 2/2023 on the technical scope of Art. 5(3) ePrivacy Directiveedpb.europa.eu, version 2.0 adopted 7 October 2024
- eCFR · 16 CFR 312.2, COPPA definitionsecfr.gov/current/title-16/chapter-I/subchapter-C/part-312/section-312.2
- HHS · Use of online tracking technologies by HIPAA covered entitieshhs.gov/hipaa/for-professionals/privacy/guidance/hipaa-online-tracking
Frequently asked questions
What is fingerprinting in app attribution?
Matching an install to an earlier tap by comparing signals the phone gives off, such as its IP address, model, OS version and timing, instead of something that names the link. The result is a likely match, not a proven one.
Does App Tracking Transparency permission make fingerprinting allowed?
No. Apple’s documentation says fingerprinting isn’t allowed regardless of whether the user gives permission to track.
Can I measure iOS installs without fingerprinting?
Yes, within limits. Links that open the installed app are exact, Apple Ads installs come with Apple’s own attribution, and App Store Connect reports downloads per campaign in total. What you can’t get is a per-install link for most iPhone installs that started on the web.
How long does Google Play keep the install referrer?
For 90 days after the install, according to Google’s Play Install Referrer documentation. Read it once, on the first launch.
Is probabilistic attribution the same as fingerprinting?
It uses the same kind of signals: network address, device model, OS version and timing. Apple describes deriving data from a device to identify it as fingerprinting and doesn’t allow it. Check any vendor’s method with your privacy counsel.
Will I see fewer attributed installs?
On iPhone, yes: installs that only a guess could have connected become organic. On Android, installs from your links through Google Play keep their source.
Continue exploring
Know Which Link Brought Every Install: Appy’s iOS and Android SDK
Appy now follows your links past the app store: installs, in-app events and revenue for every link, QR code and campaign, and new users who open on the right screen.
Deferred Deep Linking Without an SDK: How It Actually Works Under the Hood
You can carry link intent across an app install without embedding an attribution SDK. What actually survives the store boundary on Android and iOS, what breaks, and what each workaround costs in privacy.
How to Decrypt the Meta Install Referrer on Android
Facebook and Instagram can tell your app which campaign, ad set and ad brought an install, views included. How to read it and decrypt it.
Looking for something else? Browse all topics on the blog.
Count only the installs you can prove
Appy’s strict mode credits an install only with proof and never matches by device signals. It is part of Enterprise.