Apple is now writing down a rule it should have enforced years ago: you can’t pass App Store review as a harmless app and then turn into a nudification tool once you’re approved.
According to TechCrunch, Apple tightened its developer guidelines over the weekend. Apps that host user-generated content must filter objectionable material, give users a way to report it, and let them block abusive accounts. Apps with hidden or undocumented features are banned, including those that misrepresent their purpose during review and reveal harmful capabilities, such as nudification, only after approval. Apple’s blog post calls this tactic bait-and-switch. The company says it will remove apps that add features that weren’t in the version it reviewed. It also reworded its legal section to say it will bar apps promoting human trafficking and the exploitation of children.
The wording is firm. The mechanism is the problem. Apple reviews a build at a single point in time, and a lot of modern app behavior lives on a server. An app can ship an innocent interface and switch on an image-generation backend later, with no new binary for a reviewer to inspect. So the rule depends on Apple catching changes it has limited visibility into, or on users reporting abuse after the harm has started.
And the harm here is concrete. Nudify apps take a photo of a real person, often without consent, and produce a fake explicit image. Victims are frequently women and teenagers. Users are also asked to upload personal photos to unknown developers, with little clarity on where those images are stored or how long they’re kept. That’s a privacy failure on top of an abuse problem.
Apple likes to point to its enforcement numbers. It said last year that its review process blocked more than 150,000 apps from reaching users and removed 193,000 developer accounts for fraud and abuse. Those figures sound big, but they say nothing about what got through.
Plenty did. In April, a Tech Transparency Project report found that both Apple’s and Google’s stores hosted multiple nudify apps, some rated as suitable for minors. In July, San Francisco ordered both companies to clean up and delete such apps. City Attorney David Chiu accused them of profiting from the apps through store fees. That detail matters. Both companies take a cut of in-app purchases, so every subscription to a nudify tool is revenue for the platform.
The update looks partly like a response to that legal and reputational pressure. Rules in a blog post are cheap. What would be convincing is evidence of post-approval monitoring, such as audits of server-side behavior, faster takedowns, and public numbers on how many nudify apps were removed and how long they stayed up. Apple hasn’t offered those yet.
For now, users and potential victims are still part of the enforcement system, whether they agreed to be or not.