Blog

iOS 26 Won’t Kill Your UTMs – Here’s Proof

Despite headlines warning of doom, our testing shows iOS 26 leaves Northbeam’s UTMs untouched.

TL;DR

  • UTMs are safe: Northbeam’s nbt tag and standard UTMs remain untouched in iOS 26 across all devices and configurations.
  • Nothing new in iOS 26: The same URL parameter behavior has existed since iOS 18—this isn’t a fresh privacy crackdown.
  • Click IDs may get stripped in edge cases: Identifiers like gclid and fbclid can disappear in private browsing, Messages, Mail, or with Advanced Tracking Protection on.
  • Attribution clarity still matters: Good multi-touch attribution is the only way to cut through platform bias and Apple’s tightening privacy rules.
  • Here we go again: iOS 26 is allegedly killing UTM tracking in favor of increased privacy protections. 

    Everywhere you look, headlines warn about “new privacy protections” that will nuke your tracking. The legacy of iOS 14.5 looms. People are freaking out. 

    iOS 26 is expected to drop mid-September, right during the lead up to Black Friday Cyber Monday. But Apple’s own release notes on iOS 26 are sparse. 

    Is this another watershed update that will upend all our digital strategies? 

    Or is all this just FUD spread around by ecommerce SaaS tools seeking to capitalize on fear? 

    Customers are asking us if Northbeam’s parameters are on the chopping block. So we went into the lab and tested it ourselves. The results are boring – in the best way.

    Apple’s Crusade: Privacy, or Hegemony?

    Marketers have been living with Apple’s privacy standards for two decades.

    Every single update set off alarms in the DTC ecosystem. In the past, growth marketers were able to thrive by hacking Meta’s extreme tracking functionality, to squeeze maximum results out of complex targeting setups. 

    Every update removed depth of tracking, upsetting targeting and attribution strategies that growth marketers relied on. And now, with iOS 26, the cycle repeats. 

    The difference? This time there’s no actual change in UTM behavior.

    Marketers on X were quick to clutch pearls, but we decided to test: how would iOS 26 affect Northbeam data?

    Our Independent Testing

    Instead of speculating, we ran controlled experiments across multiple devices in our Apple device lab.

    Here’s how:

    1. We constructed test URLs with both creative identifiers (nbt, utm_source) and click IDs (fbclid, gclid).
    2. Loaded the URLs in Safari via different paths: clicking in Messages, Mail, Facebook in-app browser, direct typing, private browsing, and with “Advanced Tracking Protection” enabled.
    3. Observed which parameters remained in the Safari URL bar and which disappeared.

    We ran this on:

    • An iPhone on iOS 18
    • An iPhone on iOS 26 beta
    • Two Macs on current macOS builds

    What We Found

    Finding 1: Nothing new in iOS 26
    UTM removal behavior is identical between iOS 18 and iOS 26. Anyone saying this is a “new privacy rule” is misinformed.

    Finding 2: Creative UTMs are safe
    For URL parameters that are meant to identify ad creatives — they were not removed by the Safari browser. These include:

    • nbt (Northbeam’s signature tracking parameter)
    • utm_source
    • utm_medium
    • utm_campaign
    • utm_term
    • utm_content
    nbt, utm_source, utm_medium, etc. URL is clicked in Messages app URL is clicked in Mail app URL is typed directly into Safari URL is clicked in Facebook app and opens in Facebook in-app browser
    Safari (default settings) UTM not removed UTM not removed UTM not removed N/A
    Safari (private browsing) UTM not removed UTM not removed UTM not removed N/A
    Safari (with Advanced Tracking and Fingerprinting Protection) UTM not removed UTM not removed UTM not removed N/A
    Facebook in-app browser N/A N/A N/A UTM not removed

    Finding 3: Click IDs can get stripped
    For URL parameters that are meant to identify click IDs, session IDs, or user IDs (generally used by advertising platforms for granular tracking), those are removed by the Safari browser under certain conditions. These include:

    • fbclid
    • gclid
    • msclkid
    • twclid
    • dclid
    • yclid
    fbclid, gclid, msclkid, etc. URL is clicked in Messages app URL is clicked in Mail app URL is typed directly into Safari URL is clicked in Facebook app and opens in Facebook in-app browser
    Safari (default settings) UTM removed UTM removed UTM not removed N/A
    Safari (private browsing) UTM removed UTM removed UTM removed N/A
    Safari (with Advanced Tracking and Fingerprinting Protection) UTM removed UTM removed UTM removed N/A
    Facebook in-app browser N/A N/A N/A UTM not removed

    But note: none of this applies to the original ad click itself. If someone taps your Meta ad in the Facebook app, the click ID is preserved. It’s only when people copy/paste or share the URL later that stripping may occur.

    What This Means for You

    First, don’t buy into the panic.

    • Northbeam’s parameters remain unaffected. Our nbt tag and standard UTMs are untouched, across all devices and configurations.
    • Any tracking degradation you’ve heard about is not new. This has been happening since iOS 18.
    • If you see performance dips in Northbeam, it’s not because tracking broke. It’s because your underlying ad platforms are delivering weaker results.

    Platforms that rely heavily on click IDs (Meta’s fbclid, Google’s gclid) are the ones at risk of degraded reporting in edge cases. Even then, the impact is limited to private browsing, Messages links, and advanced settings that only a fraction of users enable.

    So if you’ve been worried about iOS 26 wiping out your attribution stack: breathe. It’s a nothingburger.

    Why Good Attribution Still Matters

    Even if this round of panic is overblown, the bigger picture hasn’t changed. Apple is steadily tightening the walls around user-level data. Platforms are incentivized to over-report their own performance. Ad auctions are only getting more competitive.

    That’s why clean, independent, multi-touch attribution isn’t optional. It's survival.

    This is literally why we built Northbeam. 

    With Northbeam multi-touch attribution, you’re not relying on single-point metrics like ROAS or click IDs that can disappear when Apple flips a switch. You’re measuring across every touchpoint: clicks, views, and conversions on Meta, Google, TikTok, YouTube, Shopify, and more.

    Instead of guessing which channel drove a sale, or waiting six weeks for an incrementality test, you get a real-time, deduplicated, revenue-backed picture of what’s working. 

    That clarity is what allows you to scale spend confidently, cut wasted budget, and prove profitability to finance.

    This is the reason top ecommerce brands use Northbeam as their source of truth. It’s not just about surviving Apple’s latest update. It’s about future-proofing your entire growth engine.

    Bottom Line

    In other words: ignore the noise. Focus on building a growth strategy backed by attribution you can trust.

    If you’re ready to cut through panic headlines and operate with clarity, book a demo of Northbeam MTA.

    Continue Reading

    It's time to take your marketing

    to the next level.

    Chat with our team and discover how Northbeam can transform your business.
    book a demo