Apple’s War on Web Tracking Resumes. Here’s What Survives It.

iOS 27 goes beyond simply blocking third-party cookies, targeting the infrastructure the ad tech industry built to replace them. The case for purchase data just became even more clear.  

Once again, Apple has declared war on the ad tech industry’s post-cookie playbook. And this time, the workarounds might not work.

iOS 27 doesn’t just block third-party cookies. It blocks the entire identity resolution infrastructure the industry built to replace them. That includes the first-party-based identity graphs that ad tech vendors spent five years developing as their privacy-safe alternative. 

Apple’s WebKit engineers were explicit in an official blog post cited by AdExchanger: even when an identity graph is scoped to a single company’s own customer data, if a third party is doing the matching and tracking, it’s blocked.

For brands and agencies that believed they had adapted to the post-cookie era, Apple’s latest privacy-focused move lands as a second disruption, one that’s broader and harder to route around than the first.

Dan Davies, EVP of product at BarkleyOKRP’s MissionOne Media, sees a pattern in how these moments unfold. “Every seismic shift that has arisen in the ad tech space around tracking rigor, privacy, and targeting upheaval has come with equally heavy anxiety on the part of marketers and tech companies,” Davies says. 

“The first wave of use tracking restrictions created a ripple effect of tech companies and agencies finding other ways to reach the consumers they spoke to through ID matching,” he adds. iOS 27, Davies argues, forecloses those hard-won workarounds more completely than anything that came before it.

‍

From Identity to Context

What changes most immediately is the targeting logic that has organized digital media buying for two decades. 

Hayley Selch, head of retail media at Charts+Darts, describes Apple’s latest salvo in direct terms. The company is now blocking the middlemen that connect a person’s email address across websites and devices. “Apple’s argument is that even if a company only uses its own customer data, a third party doing the matching is still tracking,” Selch says. “For brands, it means less ability to target the same person across sites, limit how often they see an ad, or tie an ad view to a later purchase on iPhones running iOS 27.”

Allen Adamson, co-founder of brand consultancy Metaforce, sees this as part of a larger industry shift in terms that cut to the strategic core. “Targeting moves from ‘who is this person’ to ‘what is this person doing right now,’” Adamson says. “Context beats identity when identity is gone.”

Davies welcomes the forced reorientation. “Hours and dollars spent on the minutiae of finding ways to skirt restrictions can now be spent instead finding clean, well-lit places, contexts, and formats where true strategy and research has told us our customers are,” he says. “Rather than clean rooms and data complexity, a return to breakthrough, thoughtful, and humanized strategies for gaining an audience’s attention will gain primacy.”

‍

The Signal That Holds

The asset that survives Apple’s crackdown most cleanly, then,  is one that was never dependent on browser-based identity: verified purchase data. Adamson’s framing is blunt. “A transaction is a fact. An identity graph is a guess. Apple just made facts the only currency left.”

That distinction matters beyond retail. First-party purchase data — whether it originates from a brand’s own transaction records, a financial data partner, or a permissioned consumer purchase panel — doesn’t rely on cross-site matching or identity resolution to be meaningful. It reflects what people actually bought, not a probabilistic inference about who they might be. That kind of deterministic behavioral signal is now the only reliable foundation for both planning and measurement.

Selch maps out the measurement consequence directly. “Transaction data tells you who bought, not who saw an ad, so connecting the two will get harder,” she says. “Measurement shifts from user-level match-back to holdouts, geo tests, MMM and aggregated clean-room outputs.” The brands best positioned for that shift, she argues, are the ones that have already built measurement methodologies around incrementality and aggregated lift rather than last-touch attribution.

‍

Where Retail Media Fits — and Where It Doesn’t

The Apple announcement lands at a particular moment for retail media, when post-cookie technology was seen as preserving offsite targeting and browsing-based measurement.. Kim Mayo, executive director of retail media at Trade School, draws a distinction between what changes and what doesn’t. “Apple’s move doesn’t end retail media, but as identity-based targeting becomes more restricted, offsite activation and measurement will get harder,” Mayo says. “What doesn’t change is the retailer’s advantage: real purchase data and direct access to shoppers who are already looking to buy.”

Selch adds an important caveat about where the budget migration actually leads. Offsite gets harder on Safari, but doesn’t entirely disappear; retailer-direct integrations with logged-in platforms, CTV, and in-store environments hold up while anything relying on third-party identities degrades. 

“There’s only so much onsite inventory,” Selch says, “so a flood of budget there means higher CPCs and thinner returns.” The retailers that hold pricing power will be the ones with strong logged-in, owned inventory rather than those heavily reliant on third-party scale.

Adamson dismisses the idea that retail media’s core strength was ever browser-dependent. “Retail media’s strength was never Safari. It was the shelf,” he says. “Amazon, Walmart and Target own the moment of purchase. That moment just got more valuable, not less.”

‍

A 10-Year Game

Davies sees the iOS 27 announcement as a clarifying event rather than a crisis — one that advantages the practitioners who have been doing the harder work of building audience strategy on durable foundations. 

“Those agencies, ad tech companies, and brands that do the work, find context, and get back to the clear foundations of advertising will win,” Davies says, “while the tech that relied too heavily on short-term bandaging will find their ID pools pretty shallow.”

Adamson gives the dynamic its sharpest framing. “Apple is playing a ten-year game,” he says. “Ad tech keeps playing a one-quarter game.”