Facebook pays users to sideload data-gathering VPN in apparent violation of Apple privacy policies
Importantly, Facebook relies on the three software testing platforms to enable sideloading of the Research app, effectively bypassing Apple’s App Store and its stringent guidelines. Facebook does not disseminate Research through Apple’s TestFlight, presumably because the system involves an app review process and 10,000 user limit.
The entire operation smacks of deception and appears to fly in the face of Apple’s good faith developer agreements. In particular, Research asks users to install an Enterprise Developer Certificate and VPN, granting root access to a bulk of iPhone’s transmitted data, the report says. As noted by TechCrunch, Apple’s developer guidelines place restrictions on the Enterprise Developer Certificate, noting companies are to use the privilege only for internal apps distributed to employees.