Apple has spent years making privacy a selling point. From limiting cross-site tracking to requiring apps to ask for permission before following users around the internet, the company has helped reshape how digital advertising works.
Now, its latest Safari update is raising a different kind of concern. With iOS 27, Apple has begun blocking certain ad tech companies at the domain level, potentially interfering with everything from audience targeting to the actual delivery of ads.
And the advertising industry has some questions.
Who decides which companies get blocked? What happens when a privacy restriction prevents an ad from appearing at all? And how much control should a browser owner have over the businesses that depend on its technology?
In the latest episode of The Daily Carnage Show, Shannon Sankey breaks down Apple’s Safari ad tech blocklist, the concerns surrounding its rollout, and what marketers should be watching as the situation develops.
Want the full story? Watch the episode here to hear Shannon’s take on what Apple’s latest privacy move could mean for digital advertising.
What Changed With Safari and iOS 27?
When Apple released iOS 27 in September 2026, the update introduced restrictions affecting several companies involved in programmatic advertising and identity resolution.
According to AdExchanger’s initial reporting on the Safari restrictions, the affected companies included The Trade Desk, LiveRamp, ID5, Permutive, Audigent, and the Unified ID 2.0 initiative.
These companies support different parts of the digital advertising ecosystem, from identifying audiences across websites to helping advertisers buy and deliver ads.
The problem is that blocking a company’s domain can have consequences beyond preventing tracking.
Take The Trade Desk. Its core ad-serving domain, adsrvr.org, was included in Safari’s blocklist. That meant some ads purchased through the platform couldn’t be delivered to users running the affected version of iOS.
And that’s where things get complicated.
There is a meaningful difference between preventing a company from identifying someone across websites and preventing that company from delivering an advertisement.
An advertiser can purchase an impression without necessarily needing to identify the individual viewing it. But if the domain responsible for serving the ad is blocked, the advertisement may never make it onto the screen.
Apple has since addressed The Trade Desk’s ad-serving domain in an iOS 27.2 beta. However, the fix wasn’t immediately available to everyone using the public version of iOS 27.
The Blocklist Could Get Much Bigger
The initial restrictions affected a relatively small group of companies. But that might only be the beginning.
In a follow-up investigation, AdExchanger reported that Apple was developing a much broader list involving hundreds of ad tech, marketing technology, consumer data, and identity companies.
According to sources familiar with the plans, the system could allow Apple to update restrictions remotely rather than waiting for another operating system release.
Think about what that means for a company whose product depends on communicating with Safari.
Its technology could work perfectly well today and encounter restrictions tomorrow. And without clear criteria for inclusion or a transparent appeals process, preparing for those changes becomes difficult.
That’s a problem for the companies being blocked, of course. But it’s also a problem for their clients.
Advertisers, agencies, and publishers build their technology stacks around vendors they expect to keep functioning. A sudden change at the browser level can affect campaign performance, measurement, and the relationships between those businesses.
Privacy policies are nothing new in digital advertising. The uncertainty around how these particular restrictions are applied is what makes this situation especially uncomfortable.
Why Publishers and Advertisers Should Care
Let’s talk about the money.
Publishers depend on advertising revenue to support much of the content people access across the open web. And programmatic advertising relies on a collection of technologies working together to evaluate inventory, place bids, and deliver ads.
When part of that process stops working, publishers can feel the effects.
If advertisers lose access to certain audience signals, they may become less willing to bid on an impression or may reduce how much they’re willing to pay for it.
There’s also the possibility of something even more frustrating: paying for an ad that never appears.
As Business Insider reported on the industry’s reaction to Apple’s update, the restrictions have disrupted ad delivery and raised concerns about the value of advertising inventory on Apple devices.
For advertisers, this creates a practical measurement problem.
Winning an impression in an auction doesn’t automatically mean the ad reached someone’s screen. And when those numbers don’t match, determining who is responsible can get messy.
Was the advertiser charged? Did the demand-side platform register the impression? Did the publisher receive the ad? Was the creative actually rendered?
Those questions involve several parties, and the answers may depend on the contracts between them.
For marketing teams, it’s a reminder that campaign reporting deserves a closer look, especially when external platform changes can interfere with delivery.
Privacy Protection or Platform Power?
Here’s where the conversation gets more interesting.
Apple has legitimate reasons to limit cross-site tracking. The advertising industry has spent years developing increasingly sophisticated ways to identify people, connect their activity across devices, and use that information for targeting.
Consumers haven’t always had a clear understanding of how much information was being collected about them.
Apple’s privacy efforts have helped push the industry toward greater restrictions on those practices.
But the Safari blocklist introduces another question: What happens when the company enforcing privacy rules also controls the infrastructure that other businesses need to operate?
Unlike Apple’s App Tracking Transparency framework, which introduced permission requirements for tracking across apps and websites, the new restrictions can prevent certain domains from communicating with the browser altogether.
In an AdExchanger analysis of how iOS 27 differs from Apple’s earlier privacy changes, the publication highlights the broader implications of blocking ad-serving infrastructure alongside identity-related technologies.
Apple also operates its own advertising business, which makes transparency especially important.
That doesn’t establish that the restrictions are intended to benefit Apple’s advertising operations. And speculation that the company might eventually charge blocked vendors for access remains unverified.
Still, the industry has a reasonable interest in understanding how these decisions are made.
When a company controls the browser, the operating system, and the rules governing access to users, its decisions can have consequences for competitors and businesses throughout the advertising ecosystem.
Protecting privacy matters. So does having clear, consistently applied rules.
What Marketers Should Do Now
There’s no reason to immediately rebuild your entire advertising strategy because of Apple’s latest update.
But it is a good opportunity to look at how dependent your campaigns are on technologies outside your control.
Here are five areas worth reviewing:
- Audit your ad tech dependencies. Identify the identity providers, tracking pixels, analytics tools, and advertising platforms your campaigns rely on. Understand which domains and services are essential to their operation.
- Verify actual ad delivery. Pay attention to differences between purchased impressions, served impressions, and independently verified delivery. A winning bid doesn’t always mean someone saw the ad.
- Strengthen your first-party data strategy. Data collected directly through customer relationships can reduce your reliance on third-party identification systems. It won’t solve every delivery issue, but it gives your marketing strategy another foundation.
- Ask vendors about contingency plans. Find out how your partners are responding to browser restrictions. Can their systems support alternative measurement methods? What happens if a critical domain becomes unavailable?
- Keep an eye on platform dependence. Privacy compliance is essential, but marketers also need to understand the risks of building campaigns around infrastructure controlled by a small number of companies.
These are useful questions even if Apple’s blocklist never expands beyond its current scope.
The advertising ecosystem is constantly adapting to changes in browser policies, tracking permissions, and data availability. Knowing how your technology works, and what could interrupt it, helps your team respond when something changes.
The Bigger Question for Digital Advertising
Apple’s Safari blocklist has brought an old tension back into focus.
The internet needs stronger privacy protections. It also depends on an advertising ecosystem that supports publishers, helps businesses reach customers, and funds access to a lot of the content people use every day.
Those interests don’t always align neatly.
And when the rules are enforced by companies that control major parts of the internet, the stakes get even higher.
For marketers, the immediate priority is understanding where their campaigns might be exposed. For the broader industry, the conversation is about transparency, competition, and who gets to decide which technologies can participate.
Because knowing who controls your audience data is important.
Knowing who controls the infrastructure your advertising depends on might be just as important.
