Tell HN: An app is silently installing itself on my iPhone every day
243 points
7 hours ago
| 35 comments
| HN
Every day for the past 3 days around 1pm EST the 'Headspace' app has been silently appearing on my iPhone (13 Pro). Automatic downloads are turned off and I've updated to the latest iOS since this started happening.

I googled around and found a couple reddit threads with people reporting the exact same thing starting 2 or 3 days ago. There were reports from people on iPhone 12 and iPhone 17 so it doesn't seem device-specific.

Anyone else seeing this? Does anyone understand how or why this is happening?

usef-
2 hours ago
[-]
This isn't the first system bug that primarily was visible due to headspace: https://www.macrumors.com/2017/12/02/ios-11-1-2-date-bug-cra...

In 2017 it was an endless crash loop caused by any app with local time-based notifications.... Which for almost everyone at the Apple store I visited was meditation apps with daily meditation reminders (in Australia we were among the first to wake up on that affected date. The fix went out before most of the remaining world woke up)

I wonder if the daily reminder is triggering a reinstall? Perhaps try disabling the reminders before uninstalling.

reply
visiondude
1 hour ago
[-]
My hypothesis is that headspace registered many user notifications and since user notifications trigger an app launch and perhaps you have optimize storage by offloading apps enabled? ios has a quirky app state where some local data exists but the app itself (ipa package) is offloaded
reply
_-x-_
5 hours ago
[-]
Here's a Reddit thread of other people experiencing the same issue: https://www.reddit.com/r/ios/comments/1su82sc/headspace_app_...
reply
cortesoft
4 hours ago
[-]
This is fascinating. I am very curious to find out what the actual cause of this turns out to be.
reply
trueno
3 hours ago
[-]
same. i get blasted with ads for this app on whatever platform, never installed it myself. the amount of promotions + this = my underdeveloped brain is so ready to assume the worst here. been a while since i used my pitchfork & i'm here for the riot.

if it is, in fact, something nefarious at play that would be a pretty crazy 2026 era exploit. but i'm certain it's a bug/artifact of some sort that, for whatever reason, affects this specific app.

reply
powersnail
3 hours ago
[-]
Maybe the developer was using Headspace as part of the test data and it bled into production?

It's hard to imagine what Headspace would like to achieve if this were an exploit executed by them. It's so salient, that it makes no sense to do on purpose. At least some portion of Apple employees and their families are going to be affected by this, and this would escalate to the legal department immediately.

My money is on Apple being the buggy one here.

reply
red_admiral
44 minutes ago
[-]
I feel sorry for the headspace devs if it's really 100% Apple's fault.
reply
trueno
2 hours ago
[-]
> My money is on Apple being the buggy one here.

Yeah I'm thinking some sort of test artifact bleeding into prod and subject so some nightly process is likely the case.

reply
concinds
1 hour ago
[-]
I wish Apple released incident reports in cases like these. I hate that their secrecy obsession extends so far beyond hardware.
reply
Bjartr
5 hours ago
[-]
Based on that I'd guess either a meditation app company has figured out how to circumvent a lot of controls put in place by Apple, or it's a bug on Apple's side
reply
a34729t
4 hours ago
[-]
Or it is a mandated backdoor, and someone internally objected, and made it easier to exploit than it should be, or leaked how to exploit it?
reply
8cvor6j844qw_d6
4 hours ago
[-]
> mandated backdoor

Probably one from the repository of backdoors "accidentally" introduced or "never" discovered.

The mechanism's there, just needs to be woven with other exploits.

reply
_-x-_
5 hours ago
[-]
Yeah, I think the latter is more likely than the former. Perhaps a server side bug that's silently downloading the app on any device that's installed it previously?
reply
donkey_brains
5 hours ago
[-]
But why this one specific app and no others?
reply
altairprime
3 hours ago
[-]
Maybe Apple typo’d an app id incorrectly for some iOS core app thing in 26.4.2 and the one-character error is this app? I don’t know that anyone’s done a ‘likelihood of collision’ analysis on appstore unique IDs yet. Certainly I could see iOS having a “must be on the device” system set up for apps like Phone and Settings that has a last-ditch of reinstalling it if somehow deleted. Would be especially interesting if some core app that can’t normally be deleted is currently unprotected (back up your device locally first!).
reply
layer8
3 hours ago
[-]
Maybe it’s Apple’s equivalent of Guru Meditation.
reply
_-x-_
4 hours ago
[-]
Right, that's what confuses me the most. I was very surprised to find the reddit thread showing that other people are also having this specific app silently installed on their devices.
reply
breppp
3 hours ago
[-]
Headspace leaves health data, that's where my first guess would be
reply
bharat1010
2 hours ago
[-]
looks like, no where its safea anymore
reply
aaronbrethorst
4 hours ago
[-]
I wonder if U2, or Bono, has taken a significant stake in Headspace recently (kidding).
reply
fmajid
6 minutes ago
[-]
It's not good four my blood pressure to be reminded of that sanctimonious tax-dodging hypocrite.
reply
meindnoch
1 hour ago
[-]
It was so fucking funny. I wonder what the engineer thought, who had to issue the SQL query which added Bono to literally everyone's collection. Like, I'm not surprised that management was so out of touch, but I'd expect the engineers to have a bit of common sense...
reply
PunchyHamster
7 minutes ago
[-]
What he was going to do, ignore management ? There is always someone else clueless or not caring enough to do it
reply
actionfromafar
26 minutes ago
[-]
They follow orders, like soldiers do.
reply
steve1977
2 hours ago
[-]
A 50th anniversary gift you mean?
reply
edbaskerville
2 hours ago
[-]
Deep cut
reply
swiftcoder
1 hour ago
[-]
Jesus, I hope not. That happened just a few years ago... right?
reply
dtech
19 minutes ago
[-]
More than a decade ago
reply
stingraycharles
40 minutes ago
[-]
Wasn’t that around the release of the iPhone X?
reply
yokuze
4 hours ago
[-]
Do you have Settings > Apps > App Store > (Automatic Downloads) App Downloads turned on?

I noticed apps appearing on my Home Screen I’d never heard of before. Turns out with that setting and Family Purchase sharing turned on, every time my wife installed a new app, it installed on my phone too.

That may not be your exact scenario, but I wonder if turning off that Automatic App Downloads setting (if enabled) changes anything. Could give you a clue, if so.

reply
_-x-_
4 hours ago
[-]
App Downloads and App Updates are both turned off. I don't have anyone else's devices on my account, just me. Thank you for the suggestions though!
reply
COFyumo
4 hours ago
[-]
I have the same exact thing happening. I deleted the app a few days ago when was surprised to see it in my app list.

I had previously downloaded the app but and removed it because I never used it. A few days ago I noticed the app when browsing through my app list and thought maybe I didnt delete it properly, so I made sure to delete it. Then this morning my iPhone updated software versions and I found he Headpsace app again on my home, except this time it was grayed out and waiting for me to go on wifi to download.

I just deleted it again but am equally dumbfounded

reply
_-x-_
3 hours ago
[-]
That's interesting that it still showed up on your homescreen despite not being able to download
reply
doncho
2 hours ago
[-]
Very interesting, especially if it found a way to bypass the explicit disabling of automatic downloads…

Now imagine you’re roaming during a 10-day vacation…and you think you’re in control :) …

reply
nottorp
2 hours ago
[-]
Meanwhile, I can't install an iOS game i bought in 2021 (Azure Saga if it matters) because it's delisted from the app store.

Damned if you pay them, damned if you don't.

reply
forsalebypwner
1 hour ago
[-]
reply
nottorp
1 hour ago
[-]
Probably requires a jailbroken ipad?

I'll take it as a lesson to not even look at games on iOS [1]. I added it to my wish list on Steam, i might get it on a sale.

[1] Not that iOS has many games. I can't afford the free ones.

reply
forsalebypwner
14 minutes ago
[-]
No jailbreak required, just sideload it with a tool like Sideloadly. There are plenty of games, but it's understandable if you don't want to support Apple's practices.
reply
serial_dev
49 minutes ago
[-]
Just a theory, I give it about 0.001%.

What if it’s the U2 Bono of the apps?

Apple struck a partnership with them, they will roll it out as part of their OS, everyone will get some version of it for free? Some dev at Apple is testing the auto rollout feature, they didn’t realize it was for production?

reply
jonplackett
44 minutes ago
[-]
Yesterday I put my AirPod in and squeezed it, expecting Spotify to play - but it must have quit, and instead my mac opened up Music - and that album was STILL there and started to play. How many years has it been?
reply
1659447091
4 hours ago
[-]
Do you use iCloud drive?

This might be a stretch as I am taking a guess at the implementation, but apps can sync with iCloud Drive and I keep getting app folders showing up after telling it not sync but the prefs reset after certain states(not quite sure when/how)-- it then creates a new sync folder when interacting with the app again. (after having turned off sync and deleting the folder -- once it resets)

I am wondering if that app had that feature (icloud drive syncing) and something of the reverse is happening. Where you have a document still on icloud drive from when you installed the app. Maybe there is some action or state change going on after interacting with drive on a mac or something similar. And now it's created the right circumstances for icloud drive to try and sync the file but there is no app on any device so it downloads the app instead since it's missing and there is some dangling file looking for its home.

reply
_-x-_
3 hours ago
[-]
It still doesn't make sense why the app started silently downloading itself 3 days ago when I haven't had it installed in over a year. I do use iCloud drive but do not see anything related to the app inside of it.
reply
1659447091
3 hours ago
[-]
Did you update iOS before it started happening? Wondering if they may have introduced a regression that is now trying to re-sync everything after the last update (sync files may be hidden, I set files to always show)
reply
_-x-_
3 hours ago
[-]
I updated after noticing the issue
reply
janstice
6 hours ago
[-]
Is your phone connected to some work mobile device management? I could imagine someone has a jinxed Jamf or intune rule that is pushing things out.
reply
_-x-_
6 hours ago
[-]
No, this is my personal device. It has never been connected to any MDM.
reply
Schiendelman
6 hours ago
[-]
Have you actually checked your device management settings?
reply
_-x-_
5 hours ago
[-]
Yes. In Settings > General > VPN & Device Management, it says 'Sign in to Work or School Account'. Is there a different device management setting that I should be looking at?
reply
Schiendelman
5 hours ago
[-]
That's the one. I was worried you might have something you didn't know about!
reply
teruakohatu
5 hours ago
[-]
Yes, there are alt app stores that try to get you to agree to installing a MDM
reply
altairprime
4 hours ago
[-]
The iOS reviews for the app also confirm this story affecting others.
reply
whilenot-dev
2 hours ago
[-]
I think it's worth mentioning that you had the app installed around a year ago, as I can imagine some "restore from backup" scenario at play.

I'm currently with a 13 mini (26.4.2), never had this app installed, and am not encountering this issue.

reply
k310
7 hours ago
[-]
Did you ever install it, or Ginger?

An app store search also turned up "Headspace Care" (Ginger)

Ginger is now Headspace Care

It would be beyond malware for an app to install itself, since there's that app store hurdle to leap. (IMO)

reply
_-x-_
6 hours ago
[-]
I installed the app in March of last year, and then deleted it the same day because I didn't want to pay for the subscription
reply
ddxv
3 hours ago
[-]
If anyone wants to browse some of the SDKs in headspace:

https://appgoblin.info/apps/493145008/sdks

I see normal development and tracking SDKs. If anyone sees something interesting let me know.

reply
speedgoose
2 hours ago
[-]
The Facebook Ads SDK in a mental health app isn’t normal. Or shouldn’t.

Even analytics SDKs is a bit weird to see. Are Amplitude or Sentry hosting data with a healthcare compliant infrastructure ? I won’t bet. Are those SDKs for sure not leaking health care data? It can be inadvertently, especially with Sentry. But I really wonder about why people feel the need to track so much. Do they **** in front of PowerPoint slides showing the tracking data or is it to sell user data?

reply
rkachowski
2 hours ago
[-]
They are normal. They generally want to know if the ad spend resulted in an install. Health care data is radioactive and they would be fucking up very hard if sending this to an analytics service.
reply
speedgoose
2 hours ago
[-]
I have seen studies where some apps were fucking up very hard and sending healthcare data to services that shouldn’t receive it. Sometimes in clear text.

My trust is very low. Having healthcare data in a Sentry payload by mistake happens to the best of us.

reply
hansvm
2 hours ago
[-]
Health care companies are radioactively affected by mishandling healthcare data (give or take practical impact being very toothless, especially nowadays). The data itself is mostly not an issue though under any legal theories, and if Joe Schmo hedge fund digs up your colon photos that's not usually an issue.
reply
concinds
1 hour ago
[-]
I never thought there would be online SDK databases, what a useful resource in general. Thank you.
reply
derefr
1 hour ago
[-]
Do you have an Apple Watch paired to this iPhone?

(I know that installing apps on iOS forces installation of the equivalent watchOS apps; not sure if having a watchOS app installed/running/activating itself forces installation of a "companion" iOS app that it might rely on.)

reply
timothyisonline
2 hours ago
[-]
Possible this is tied to your carrier?
reply
snailmailman
2 hours ago
[-]
I don’t think carriers have the ability to install apps on iOS. I’ve always thought it’s weird that they can do that on android.
reply
dagmx
3 hours ago
[-]
I’m curious if everyone experiencing this is on 26.4.2? It came out 4 days ago according to Wikipedia…it would make sense that it lines up with when people are seeing it start.

I’m on the 26.5 beta and not seeing it at all.

reply
a34729t
5 hours ago
[-]
I would call Apple support; you might even get an engineer call you back. I am sure they would love to know what the hell is going on.
reply
rglover
6 hours ago
[-]
If you've ever installed any companion app on your desktop macOS, your phone will try to sync apps (I think the same with Apple TV). Caught me off guard a few times.
reply
_-x-_
6 hours ago
[-]
No, I've never downloaded it on my desktop. It appears that I downloaded it onto my phone over a year ago (I got an email in my inbox), but didn't want to pay for it so I deleted it.
reply
bastawhiz
4 hours ago
[-]
Do you have MDM enabled on your device? Does your company offer Headspace as a perk and some arcane set of sketchy business agreements led to auto install policy in your company's MDM solution?
reply
_-x-_
3 hours ago
[-]
No MDM installed
reply
saidnooneever
1 hour ago
[-]
i dont know whats up, id assume bug but i wanna say iphone is uniquely annoying to find out what is happening on it and why things happen. they make it especially tedious and that makes it much easier to think this kind of stuff is nefarious even if ut might not be
reply
nkotov
3 hours ago
[-]
Had this happen as well. I haven’t used Headspace in years. Randomly had the app appear on Home Screen.
reply
verisimi
2 hours ago
[-]
Side point, re this:

> Automatic downloads are turned off

Isn't it funny that we're so used to the misuse of language (ie lies) that this isn't even a point? I'm talking about software flags to represent your choices, that are merely an 'aspirational intention' and don't actually correlate with reality.

In my world, it shouldn't be possible to override 'turned off automatic downloads'. 'Off' shouldn't be a pacifier for the user, while Apple, Google or whoever can continue installing whatever they like. This isn't what words mean. There isn't actually a choice, but it misleads you into thinking there is. I'm sure there are legal words around this in the "ownership" contract, but "off" can't really mean "on".

reply
bfbf
2 hours ago
[-]
Do you have TestFlight installed? That’s the only other way I can think of delivering apps besides the App Store and MDM.
reply
con
3 hours ago
[-]
Just checked and it also installed itself on my phone. iPhone 17 Pro, non-US App Store, on latest iOS beta, no MDM. Sounds like an Apple Store bug to me.
reply
concinds
1 hour ago
[-]
Ever had it installed before? I wonder if that's a pattern.
reply
treexs
5 hours ago
[-]
this is the plot of Persona 5
reply
rootsudo
5 hours ago
[-]
He can be the joker we need.
reply
efilife
4 hours ago
[-]
how heavy of a spoiler is this? I wanted to play it
reply
makeitdouble
3 hours ago
[-]
It's covered in the first 10~20min or so of the game, and is really a minor side point.

Off topic, put P5 as a game doesn't really care about spoilers much, there is one specific story telling gimmick that will screw with you if you're really sensitive to these kind of things.

reply
applfanboysbgon
3 hours ago
[-]
It's not really a spoiler. It is something that happens near the beginning of the game.
reply
diegoperini
3 hours ago
[-]
If I am not mistaken, it's even shown in the marketing materials to build suspense.
reply
csomar
3 hours ago
[-]
> Does anyone understand how or why this is happening?

They are drowning in tech debt. Here are two main issues I have with my iPhone/iOS: I can't search for the telegram app. It doesn't show up. It shows fine on the iPad. Also just a few minutes ago, app search decided not to work. I usually use it to pull my Wallet to pull my card. It was an awkward moment as I had no idea where the wallet app actually is.

I have lost count of the minor polish issues. The experience has degraded so much that you no longer care.

reply
snailmailman
2 hours ago
[-]
Regarding the telegram app I’d check iOS settings->apps->telegram->search and make sure “show app in search” is checked

You can intentionally hide apps from search. If you did this, it’s not very obvious that its hidden from search unless you dig for the setting. Similarly, “hidden” apps refuse to show up in search results anywhere, even in settings.

reply
nathanwh
1 hour ago
[-]
Thank you for this, I have wondered for more than a year why Google Maps would not show up when I searched for it.
reply
csomar
59 minutes ago
[-]
Thank you. I wonder how that happened as I was not aware such a feature existed.
reply
DavideNL
4 hours ago
[-]
@_-x-_: "Settings > App Store > Show Install Confirmations > On".

Maybe that helps?

reply
garyfirestorm
3 hours ago
[-]
This setting does not exist on iOS 26.4.1
reply
DavideNL
2 hours ago
[-]
reply
NetOpWibby
3 hours ago
[-]
_Severance intensifies_
reply
bofia
2 hours ago
[-]
Are other people using your phone?
reply
mandeepj
6 hours ago
[-]
How did you find that? Any notification?
reply
_-x-_
6 hours ago
[-]
It just appears on my homescreen
reply
psynixx
7 hours ago
[-]
I’ve been getting this too, same app same behaviour… Anyone been able to figure out what is causing this?
reply
_-x-_
6 hours ago
[-]
Have you downloaded the app before?
reply
meloyc
4 hours ago
[-]
jailbreak phone?
reply
_-x-_
3 hours ago
[-]
Negative
reply
throwaway5465
7 hours ago
[-]
Maybe a competitor is trying to FUD them?
reply
_-x-_
6 hours ago
[-]
I would imagine that this isn't (or at least shouldn't be) possible based on Apple's security. The app is automatically downloading to my phone without my permission.
reply