How App Privacy Report Tracks Domains in iOS 15

Apple's iOS 15 introduced the App Privacy Report to provide users with transparent visibility into how applications interact with their personal data and external network servers. This article explains how the feature logs, categorizes, and summarizes network domain requests made by third-party apps, allowing users to identify potential data brokers, background analytics, and advertising trackers operating across their devices.

The App Privacy Report records network activity locally on your device over a rolling seven-day window once enabled via Settings > Privacy > App Privacy Report. When third-party applications initiate network calls, iOS monitors every domain contacted, logging timestamps, the frequency of requests, and the specific application initiating the connection.

The summary separates network tracking into distinct, readable sections:

App Network Activity Under this section, users can select an individual third-party app to view an itemized list of every external domain it contacted. The report highlights both first-party domains (servers necessary for core app functionality, like an app's primary API) and third-party domains (such as embedded analytics SDKs, advertising networks, and data aggregators). Tapping a specific domain reveals the exact times connections occurred and whether the app communicated with the server while actively in use or operating in the background.

Most Contacted Domains Rather than looking on an app-by-app basis, the "Most Contacted Domains" section aggregates network data across the entire operating system. It identifies which external domains were pinged most frequently by all installed apps combined. Tapping any listed domain displays every app on the device that contacted it, exposing cross-app tracking networks—such as trackers operated by social media platforms, ad exchanges, or telemetry services—that monitor user activity across multiple services.

Website Network Activity When third-party apps use in-app browser views to open web content, tracking domains embedded in those web pages are logged separately under "Website Network Activity." This isolates tracking scripts loaded through web browsing from direct network requests generated by the host application itself.

Although iOS 15 does not explicitly label a domain as a "tracker," the detailed logs of endpoints—such as ad-serving platforms, crash-reporting tools, and measurement SDKs—allow users to clearly see which third parties receive their device data, enabling informed decisions regarding app permissions, App Tracking Transparency prompts, or app removal.