Refacto

Industry story

Apple's Safari Identity Block Hits Publishers With Double-Digit Revenue Drops

identity measurement privacy programmatic publisher-economics

Apple's latest iPhone software update blocks identity resolution companies — firms that stitch together data like email addresses, IP addresses, and browsing history to track users across sites — from operating in Safari and all browsers on iOS/iPadOS. Affected vendors include ID5, LiveRamp, Permutive, Audigent, and UID 2.0. The Trade Desk's ad server was briefly caught in the block as well, and its bidding has not fully recovered. Early data from Aditude shows iOS bid rates fell ~14% between mid-September and early October, eCPMs are down 4% on iOS and 11% on Macs, and revenue per ad opportunity has fallen 6% and 20% respectively on those platforms.

Analysis

Showing the shorter version.

Apple shipped an iOS update that blocks identity resolution inside Safari and every browser on iOS. ID5, LiveRamp, Permutive, Audigent, and UID 2.0 all lost signal. The Trade Desk (the largest independent ad-buying platform) got caught in the net by accident, and its Safari bidding has not fully recovered. Early data from Aditude shows iOS bid rates down roughly 8% after an initial 14% drop, eCPMs off 4% on iOS and 11% on Mac, and revenue per ad opportunity down 6% on iOS and 20% on Mac.

The Mac numbers look worse than they are, partly. A large share of that damage traces to The Trade Desk's ad-server bug, a configuration catch that gets patched. Strip that out and the structural loss is real but smaller than the headline. The question worth separating: how much of the Mac damage is the bug, and how much is permanent signal loss. The first resolves in weeks. The second does not.

Who loses

The structural losers are the independent identity vendors. LiveRamp and ID5 sell browser-signal infrastructure that Apple can switch off with a software push, and just did. Apple does not reverse these calls. No re-architecture changes who holds the kill switch. The capital those companies sank into browser-signal graphs on Apple devices is gone.

For publishers, the revenue hit is recoverable in principle, but the identity layer you built on is not coming back. Ad ops teams running header bidding enriched with ID5 or UID 2.0 are passing nothing into the auction on those lines, and they are adding latency doing it. Pull them. SSP yield teams will stop defending floors they cannot hold within 30 days, and anchoring to pre-update baselines is a mistake. That number is gone.

Where the money goes

Buyers were never loyal to open-web identity. They were loyal to measurable outcomes. When Safari identity stops working, budgets move to Android (where Google still allows the signal), to walled gardens like Meta and Amazon (where identity is logged-in and Apple cannot reach it), and to contextual buys on the same publishers. The Trade Desk routes with the buyers. Its full-year 2026 revenue will still grow year over year, because the displaced demand reroutes to inventory it can still clear rather than leaving its platform. The ad-server catch is a fixable bug. The demand is not going anywhere.

The open-web publisher question is whether contextual and logged-in buys hold enough of the displaced iOS dollars, or whether those dollars leave the open web entirely for Android and walled gardens. That is the decision that decides the category.

Our call: The Trade Desk reports full-year 2026 revenue above its 2025 figure, reported February 2027. Medium confidence. For publishers, the move is to separate the Trade Desk outage from the real structural loss before cutting floors, and redirect engineering toward logged-in and direct relationships that Apple cannot reach.

Also covered this issue

Comments