Consent or Not Consent
Permission works like the vampire rule: no invitation, no entry. ATT isn't just compliance. It's a GTM moment.
Consent or not consent. That is not the question. The real question is timing.
Permission works like the vampire rule: no invitation, no entry. Trust decides whether you get in.
I recently switched to iOS and noticed how often apps fire the ATT (App Tracking Transparency) prompt almost automatically, often before I have any real context or value, sometimes within the first few minutes after install.
I sanity-checked my intuition. In mobile gaming, GameRefinery found that 81.4% of top-grossing iOS games show the ATT pop-up within the first 30 seconds of gameplay. That is a big ask, very early.
ATT is a great case study because Apple defines 'tracking' as linking data from your app with data from other companies' apps and websites for advertising or measurement. So this moment is not just compliance. It is a brand moment. More than that, it is a go-to-market moment.
The goal is not to push a 'yes.' The goal is to earn informed permission through clarity and value, especially because it is close to a one-shot decision. Apple's system alert is a one-time prompt, and iOS remembers the user's choice.
And yet, too many ad-supported apps do not invest much thought into how they time and introduce that permission. In a USENIX Security 2024 study, researchers reached the ATT prompt in 2,836 apps, but only 273 showed a pre-alert screen before the system prompt.
A pre-prompt is a simple way to earn context before the Apple pop-up shows up and triggers a reflexive reaction.
Brands should treat permission prompts like any other high-friction moment. A strategic interaction with your audience, not a default pop-up. Win trust before the ask: earn context, show value, explain the tradeoff.
And if the answer is 'no,' keep the experience great either way.
App publishers and product folks: do you treat ATT as logistics, or as a GTM moment?