Apple's iOS 27 Blocks Identity and Data Vendors, Not Just The Trade Desk

Apple's mid-September iOS 27 update has been unconditionally blocking data and identity vendors at the domain level, taking out LiveRamp, Permutive, Audigent (now owned by Experian), the Unified ID 2.0 program and The Trade Desk's adsrvr.org root domain. A new WebKit beta, iOS 27.2, removes adsrvr.org from the blocklist, but it will not reach live installs for 3 to 4 weeks, and the larger problem is unresolved: Apple is devising a far more expansive blocklist that could cover hundreds of ad tech, martech and identity vendors that handle user data and device IDs. Safari blocks at the domain level, so the hit on The Trade Desk's cookie-sync endpoint also took out its core ad-serving domain. Measurement vendors say the focus on The Trade Desk has obscured how severe the update is for analytics and attribution, and some brands won auctions for iOS 27 ads that never rendered. Apple released Intelligent Tracking Prevention with iOS 11 in 2017 and AppTrackingTransparency with iOS 14 in 2021, and both arrived with published guidance and developer sessions; this time blocked companies found out when a publisher partner asked why ads had stopped rendering. One engineering leader compared the moment to a heart attack: "Very subtle, easy-to-ignore signals; then all of a sudden."

The crux

Apple has started enforcing its fingerprinting ban at the domain level, which severs publisher-side identity, cohort and measurement signals for Safari users and cuts the cross-channel matching that marketers rely on.

Sell-side read

Any publisher revenue line that leans on third-party identity or a LiveRamp or UID2 sync inside Safari just took an uncontrolled hit; the durable answer is first-party identity and server-side signal, not a new domain.

Watch

whether the iOS 27.2 rollout actually clears adsrvr.org for all users, and whether Apple publishes the wider blocklist.