TLDR: Apple's iOS 14 ATT change in 2021 quietly destroyed the last-click attribution model that powered a decade of digital advertising. Five years later, brands and platforms are still adjusting. The fix is a new layer of attribution that starts in the physical world and works backward, not another tracking pixel or a bigger data clean room. Here's what broke, why it matters, and what comes next.
If you're a brand in 2026 and you've ever asked yourself "is this campaign actually working," the reason you can't get a clean answer traces back to one feature Apple shipped in April 2021.
This is the long version of why mobile attribution is broken, what brands and platforms tried to do about it, and where the new attribution layer is getting built. Read it as context, not a pitch. Every founder, marketer, and creator should have it before making a 2026 decision.
What iOS 14 actually changed
Before 2021, every iPhone shipped with a unique advertising identifier called the IDFA, and every app could read it. Facebook (now Meta), Google, Snap, TikTok, and every ad network used the IDFA to stitch together a person's behavior across apps and websites. You saw a Nike ad in Instagram on Tuesday, bought sneakers on the Nike app on Friday, and the IDFA tied those two events together.
In April 2021, Apple shipped App Tracking Transparency. Now every app had to ask the user for permission before reading the IDFA. The prompt was deliberately blunt: "Allow [App Name] to track your activity across other companies' apps and websites?"
Roughly 75% of users said no.
In one quarter, Meta's ability to attribute conversions on iOS dropped by an estimated 60% to 70%. Meta's stock lost over $230B in market cap on a single earnings call later that year. Snap's revenue growth halved. Every direct-to-consumer brand that relied on Facebook Ads to scale had to rebuild its measurement stack from scratch.
Last-click attribution, the model that handed credit to the last ad someone clicked before buying, was effectively dead on iOS.
What broke for local businesses
The iOS 14 story usually gets told through big direct-to-consumer brands. The hit to local businesses is bigger, and almost nobody talks about it.
A Toronto cafe that wants to know whether an Instagram ad drove someone into the store has three problems:
1. The ad click can no longer be tied to a person across apps. ATT killed that. 2. Even if you tie the click to a session, that session ends when the person closes the app. A real visit happens hours or days later. 3. The "visit" itself is a physical event with no digital signal. No one taps an "I came in" button.
Last-click attribution always failed at point 3. ATT made points 1 and 2 fail too. So local brands have been flying blind on creator and ad attribution for the better part of five years.
What web tracking did next
Apple wasn't done. Safari rolled out Intelligent Tracking Prevention, which capped the lifetime of third-party cookies, then first-party cookies set by ad-tech, then nuked most cross-site tracking entirely. Firefox made the same moves. Chrome announced and delayed the deprecation of third-party cookies over and over, but the writing is on the wall.
Then add in-app browsers, the version of Safari that opens inside Instagram or TikTok when you tap a link. They carry their own cookie limitations. A user taps a creator's link in TikTok, lands on a brand's site inside the in-app browser, then closes the app. In the brand's analytics, that visitor shows up as a stranger with zero source attribution.
Roughly 64% of mobile web sessions originating from a creator post in 2026 carry no usable referrer data. The brand has no idea where the visit came from.
What brands tried to replace it with
Three replacements got most of the attention.
First, Apple's SKAdNetwork (SKAN). Apple's own privacy-preserving attribution framework, built to give advertisers an aggregated, delayed signal of conversions. It works for app installs and does close to nothing for brick-and-mortar foot traffic. Cafe owners can't run SKAN.
Second, marketing mix modeling (MMM). Statistical models that ingest historical sales and ad spend and spit out an estimate of which channels drove what. MMM works at scale for brands spending millions a month. For a $1,000/month cafe budget it falls apart, because there's not enough data for the model to converge.
Third, data clean rooms. Shared environments where a platform like Meta and an advertiser can match data without exposing individuals. They work for enterprise. A salon in Liberty Village can't touch them, technically or contractually.
None of these fix the core problem for local brands and creators. There's still no clean way to verify that a creator post drove a real, physical, in-store visit.
The shift: physical-first attribution
The fix starts in the physical world, not in another tracking pixel.
The logic is straightforward. Stop trying to tie a digital impression to a digital conversion. Tie a digital impression to a physical action the brand can verify directly.
The physical action that works is a redemption. A creator distributes an offer (free coffee, 20% off, a freebie tied to a code). The consumer redeems it in-store. That redemption is the attribution event, and it happens at the point of sale, where the brand has full visibility.
That one shift, from "did anyone click" to "did anyone walk in and redeem," sidesteps every broken layer of digital attribution. No cookies, no IDFA, no clean room. Just verified physical events tied to verified creators.
What this means for local brands
Three takeaways for any brand doing creator or local marketing:
1. Stop measuring creator campaigns with last-click logic. The signal is broken. You'll under-count creator-driven visits by 60% or more. 2. Use offer redemption as your attribution event, not website clicks. A redeemed coupon is verified data. A click is increasingly fiction. 3. Pick platforms that give you physical-first verification. If your creator platform can't tell you exactly which creator drove which redemption, you're back to guessing.
What this means for creators
For creators, the upside runs bigger than most realize.
Once attribution moves to verified physical events, follower count stops being the main pricing input. A creator with 2,000 hyper-local followers who drives 30 verified visits per campaign is suddenly worth more than a creator with 100,000 followers who drives 3.
That re-pricing is just starting. Creators who get on verified-attribution platforms early will set the new market rate. The ones who don't keep getting paid on follower count, a metric that means less every year.
Where Onlure fits
Onlure is one of the platforms building toward verified, physical-first creator attribution. If you're a brand or creator who wants in on that next wave, sign up free and we'll bring you along.
