Directus Asset

Sideloading with iOS 17

Directus Asset
Martin Mattli
May 17, 2023

In this blog post, we'll explain what sideloading is, what might change with the introduction of iOS 17 and why getupdraft.com is suitable as an alternative app store.

What is sideloading?

Sideloading refers to the process of installing apps on a device without using the approved app store. One of the main reasons to sideload an application is that official channels such as the Apple App Store or Google Play Store do not carry the desired software. Sideloading allows for greater flexibility and customization, but also poses potential security risks as the apps have not gone through Apple's or Google’s stringent review process.

Sideloading with iOS 17

On Android devices, apps can be sideloaded relatively easily. As of today, Apple however makes it difficult to download software from unofficial third-party providers.
This will most likely change with the roll out of iOS 17: To comply with the Europe’s Digital Market Act, Apple must allow sideloading in the EU starting in 2024. We are certainly curious to see how this will change the market and what role Updraft will play in the “sideloading-game”.

Now let’s elaborate on some of the advantages and disadvantages of sideloading.

What are the advantages of sideloading?

There are a few advantages for sideloading apps. Let’s name some of them:

  1. Access to unavailable apps: Sideloading allows you to install apps that are not available in the App Store, including beta versions of apps and apps from untrusted developers.

  2. Greater flexibility: Sideloading provides more customization options and allows for greater control because you can download apps that have been modified to your liking or older app versions which are not matching OS store guidelines. You are also able to install apps on unsupported devices through sideloading. Thus, sideloading gives access to a wider range of apps that would otherwise not be available. 

  3. Avoiding app store restrictions: Sideloading can help bypass restrictions imposed by the app stores, such as censorship or regional restrictions.

  4. Cost savings: Some paid apps can be found for free through sideloading.

  5. Testing and Development: Sideloading is a useful tool for developers to test their apps on real devices and distribute them to beta testers.

  6. Apps can be developed faster, and the app release process is shortened as the apps no longer have to pass reviews by Apple or Google.

What are the disadvantages of sideloading?

While sideloading can provide some benefits, such as access to custom or proprietary apps, it can also present several challenges and risks for enterprises. The following points are disadvantages of sideloading - especially on iOS:

  1. One major issue is security, as sideloading can increase the risk of malware and other malicious apps being installed on devices. 

  2. Sideloaded apps may not be compatible with the latest OS version updates, which can cause problems with performance and functionality. 

  3. Sideloading can violate Apple's terms of service, potentially leading to legal and financial consequences for companies that engage in the practice in non-EU-countries as of 2024.

Preventing iOS sideloading

The disadvantages mentioned above - especially the security risks - must be taken into account by companies that provide their employees with a company cell phone. To minimize the risk of malware, there are several measures to prevent sideloading on iOS devices. Here are some examples:

  1. Mobile Device Management (MDM): Companies can use MDM solutions to control the configuration and security of mobile devices. This includes setting policies that prevent employees from installing apps from unapproved sources or blocking specific apps altogether.

  2. App whitelisting: Enterprises can create a list of approved apps and prevent other apps from being installed on company devices. This can be enforced through MDM or other software tools.

  3. Employee training and policies: Companies can educate their employees on the risks associated with sideloading apps and create clear policies that prohibit the practice. This can help to raise awareness and discourage employees from engaging in potentially risky behavior.

  4. Physical device controls: Enterprises can physically restrict access to device settings, preventing employees from enabling the ability to sideload apps, by using a Mobile Device Management Solution (MDM) or by provisioning devices with a pre-defined profile which is installed on the end-users device.

By implementing these measures, enterprises can better protect their devices and data from the risks associated with sideloading apps. It's important to note that no single solution is foolproof, and a comprehensive security strategy should consider multiple layers of protection.

iOS sideloading within a "Bring your own device" (BYOD) strategy

If a company allows sideloading on employee-owned devices as part of a "Bring your own device" (BYOD) strategy, there are several measures that can be taken to minimize the risks associated with sideloading. Here are some examples:

  1. Containerization: Companies can use containerization technology to create a secure, isolated environment on an employees device where sideloaded apps can be run. This helps to minimize the risk of those apps compromising the rest of the device or accessing company data.

  2. Network access controls: Enterprises can use network access controls to limit the devices that can connect to company resources, such as email and file servers. This can help to ensure that only approved devices are accessing sensitive information.

  3. App vetting: Companies can establish a process for vetting and approving sideloaded apps, including conducting security reviews and testing for compatibility with company systems. This helps to ensure that only safe and functional apps are being used on employee devices.

  4. User agreements: Companies can require employees to sign user agreements that outline the terms and conditions for using sideloaded apps on their devices. This can include acknowledging the risks associated with sideloading and agreeing to take certain security measures to protect company data.

By implementing these measures, companies can provide employees with the flexibility to use sideloaded apps on their own devices while still maintaining strong security and compliance standards. However, it is important to note that there is always some degree of risk associated with sideloading and companies should carefully consider the potential implications before implementing a BYOD policy that allows it.

Using a third-party app distribution tool like Updraft for sideloading

The security of third-party app distribution tools for sideloading iOS apps can vary depending on the specific tool and how it is used. Some app distribution tools may provide additional security measures, such as app vetting and encryption, that can help to protect against malicious apps or data breaches. However, it's important to note that using a third-party app distribution tool can also introduce additional risks and vulnerabilities, such as the potential for data leakage or unencrypted communications.

One important factor to consider when using a third-party app distribution tool is whether it is reputable and has a proven track record of security. Companies should carefully research and review any app distribution tool before using it to ensure that it meets their security and compliance standards. Additionally, it's important to follow best practices for sideloading, such as only installing apps from trusted sources, keeping apps and devices up to date with the latest security patches and using strong passwords. Other security measures include using a VPN or a secure connection over Wi-Fi, using anti-virus software and being cautious when granting permissions when sideloading apps, to protect devices. In summary, while a third-party app distribution tool for sideloading iOS apps can provide additional functionality and convenience, companies should carefully weigh the potential risks and benefits before using such a tool and take appropriate security measures to protect their devices and data.

How we make sure Updraft is safe to use for sideloading

With Updraft and especially the Updraft app, you can control who of your employees and users can access your app and who can install it. As a company this gives you the ability to control the app distribution at any time.
Updraft offers features such as encryption and support for multiple app versions, making it a convenient and reliable option for enterprises and individuals who need to sideload apps. We continuously improve and develop Updraft according to the wishes of our users. This includes the implementation of security measures that make sideloading as safe as possible.

Summary

iOS sideloading refers to the process of installing apps from sources other than the official App Store on iOS devices. While sideloading can provide some benefits, it can also present several challenges and risks, such as security concerns and compatibility issues.

Updraft is a third-party app distribution tool that can help mitigate some of these risks by providing a secure and easy-to-use platform for installing and distributing apps outside the ‘big’ app stores. 

You can sign up for free to test out Updraft!