What is a mobile advertising ID?

A mobile advertising ID is an identifier supplied by a phone’s operating system for advertising-related uses. Apps or software components inside them may request it and send it to advertising or measurement services. The identifier is not your name or phone number, but it can act as a common label for activity on one device. Unlike a hardware serial number, an advertising ID is designed to be resettable or otherwise controlled through device settings.

The two major mobile platforms handle access differently. On iOS, an app generally needs permission through App Tracking Transparency before it can access the advertising identifier, known as the IDFA, for tracking. On Android, the advertising ID is subject to platform rules and user controls, including options that can remove or change the ID. The exact settings and behavior can vary by operating-system version. An app may also use other identifiers for its own purposes, so an advertising ID is not the only way activity can be recognized.

How activity gets connected between apps

Consider a weather app and a puzzle game that both include software from the same advertising provider. When permitted and available, each app can send that provider the device’s advertising ID along with information about an event, such as an ad view or an app launch. If the provider receives the same ID from both apps, it can associate those events with one device. This does not require the two app developers to exchange data directly; the shared provider is the connection.

The ID becomes more informative when combined with context. A report might include the app involved, an approximate location derived from network information, the time of an event, or an action taken after an ad was shown. Advertising systems may use such records to limit repeated ads, estimate whether a campaign led to an app install, or group devices into audiences. What a particular provider receives depends on the apps’ integrations, platform permissions and applicable settings.

Where the ID travels

Many apps rely on software development kits, or SDKs, for functions such as ads and analytics. An SDK is code supplied by another company and built into the app. When the app runs, that code may communicate with its provider’s servers. In an ad-supported app, an ad request may also pass through several services involved in choosing and delivering an ad. An identifier can therefore be seen by parties beyond the app you opened, depending on how that app and its partners are configured.

This is why a privacy notice that mentions “partners” can matter. The app’s developer decides which components to integrate, while those components may have their own data-handling practices. Not every SDK collects an advertising ID, and access may be blocked by platform controls. Still, understanding the flow is useful: an app records an event, attaches data it is allowed to share, sends it to a service, and that service may compare the identifier with records received from other apps.

What resetting or limiting an ID changes

Resetting an advertising ID replaces the label that participating services previously saw, making straightforward matching by that ID harder across the reset. Removing an ID or denying tracking permission can prevent certain uses of that identifier altogether. These controls are worth using if you want to reduce this form of cross-app recognition, but they do not erase data already collected by a service.

They also do not make a device anonymous. If you sign in to the same account in two apps, the operator may be able to connect activity through that account. Apps and services may receive other information needed to function, and some may try to infer connections from combinations of signals. Platform policies and technical limits restrict certain workarounds, but an advertising-ID control should be understood as one layer of protection rather than a universal tracking switch.

Practical ways to reduce cross-app tracking

Start with your phone’s privacy and advertising settings. Review app tracking requests on iOS or advertising-ID controls on Android, using the options available on your device. Then check individual app permissions: an app that does not need your precise location or access to contacts may not need those permissions granted. Permissions and advertising-ID settings address different data flows, so reviewing both is useful.

You can also inspect an app’s privacy information before installing it, favor apps that explain their data use clearly, and remove apps you no longer use. Where an app offers a choice about personalized ads or analytics, review it rather than assuming the device setting covers everything. The goal is not to find a single perfect switch. It is to reduce unnecessary sharing at several points in the path from your device to the services behind an app.

Back to category ↗