I’m about to put in a privacy-unfriendly app from the Mac App Retailer, so I wish to know whether or not sandboxed Mac App Retailer–distributed apps can nonetheless entry distinctive {hardware} identifiers (for instance, the machine’s serial quantity) or are restricted to non-unique IDs reminiscent of IDFA, IDFV, or app-generated UUIDs.
On macOS—outdoors the App Retailer sandbox—apps can simply question the system for the machine’s serial quantity and different distinctive {hardware} identifiers. My query is: below Apple’s sandbox guidelines for Mac App Retailer apps, is entry to the Mac’s serial quantity (and comparable device-unique identifiers) blocked? Or can a sandboxed App Retailer app nonetheless learn these values?
Particularly:
• Which {hardware} or system identifiers are accessible to a sandboxed macOS app put in by way of the App Retailer?
• Does the App Retailer sandbox coverage explicitly forestall studying the serial quantity or different device-unique values?
• If these identifiers are blocked, what different identifiers (if any) can App Retailer apps use on macOS for analytics or person monitoring functions?
Any tips to related Apple documentation, entitlement necessities, or API habits can be significantly appreciated.
