Email open rates after Apple Mail Privacy Protection: what to measure and which automations to fix

How email opens were measured

Email platforms measure opens by embedding a tiny image, often called a tracking pixel, in each message. When the recipient’s email client downloads the image, the platform records an open, together with information such as the time, the IP address and sometimes an approximate location and device.

This method was always imperfect. Clients that block images by default did not register opens, and some corporate security systems scanned messages and loaded images automatically. But for years the open rate was treated as a reasonably useful signal of subject line quality and audience interest.

What Mail Privacy Protection changed

Apple announced Mail Privacy Protection in June 2021 and released it with iOS 15, iPadOS 15 and macOS Monterey later that year. When a user enables it in the Apple Mail app, remote content in emails is downloaded privately in the background through proxy servers, including when the user has not opened the message.

The result is that tracking pixels load for many messages regardless of whether they were read. The IP address seen by the sender belongs to the proxy rather than the user, so location data is only approximate. Apple prompted users to choose whether to protect their Mail activity, and many chose to enable it.

The feature applies to messages viewed in Apple Mail, regardless of which email provider hosts the account. People reading email in other apps, such as the Gmail app on an iPhone, are not affected by Mail Privacy Protection itself, although other clients have their own image proxying and security scanning that can affect measurement.

What breaks

The most obvious effect is inflated open rates. Audiences with many Apple Mail users can show open rates far above their historic levels without any real change in engagement. Comparisons with pre-2021 benchmarks and between audiences with different device mixes become meaningless.

Less obvious are the decisions built on opens. Many email programmes still contain logic designed when opens were a usable signal.

Subject line A/B tests

Tests that pick a winner by open rate can choose randomly when machine opens dominate.

Resend to non-openers

Automations that resend to people who did not open miss real non-readers whose pixels were loaded by the proxy.

Sunset policies

Rules that remove inactive subscribers based on opens keep disengaged contacts who appear active, damaging sender reputation.

Send-time optimisation

Timing based on when opens occur learns proxy download times instead of reading habits.

Lead scoring

Points for opens inflate scores and send unqualified leads to sales.

Location and device reports

Proxy IP addresses make location and some device data unreliable.

Metrics to use instead

Clicks remain much more reliable than opens, although security scanners in corporate environments can also click links automatically. Many email platforms identify likely machine opens and bot clicks and allow them to be excluded from reports, which should be switched on and understood rather than taken on trust.

The most meaningful measures are downstream: visits to the website with campaign parameters, product views, add-to-basket actions, purchases, replies, booked meetings, form submissions and revenue. Connecting email platforms to web analytics, e-commerce and CRM data turns email reporting from an activity count into a business result.

For deliverability, watch bounce rates, spam complaint rates, inbox placement tests and mailbox provider tools such as Google Postmaster Tools. These reveal problems that inflated opens can hide.

Fixing automations and segmentation

Review every automation, segment and scoring rule that uses opens. Replace open-based conditions with clicks, site activity, purchases or replies where possible. Where no better signal exists, combine opens with other behaviour instead of relying on them alone.

Redefine engagement for list hygiene. An engaged subscriber might be someone who clicked, visited the site from email or purchased within a defined period. Contacts showing only opens for a long time should be treated with caution and, eventually, re-permission campaigns or removal.

Change how tests are run. Test subject lines against click-through or conversion rates, with sample sizes large enough to detect meaningful differences. Test content and offers where the effect is measured by action rather than by an open.

Privacy is the direction of travel

Mail Privacy Protection is part of a broader trend in which email clients, browsers and operating systems reduce passive tracking. Consent requirements for tracking pixels in emails are also discussed by European data protection authorities, and some organisations already treat email tracking as requiring consent in certain contexts.

The durable strategy is to rely less on passive signals and more on explicit actions and first-party data customers knowingly provide: preference centres, purchases, account activity and direct responses. Those signals are more meaningful for marketing decisions anyway.

Where this sits in what we do

This article covers one decision inside a wider engagement. The solution page sets out how that engagement runs, what it includes and what it costs to find out.

• Marketing Automation — CRM, lead capture and automated follow-up built as one system — so nothing arrives in an inbox and nothing depends on someone remembering.
• Why more traffic rarely fixes a pipeline problem
• Lead scoring that sales will actually use
• Arabic websites for Gulf markets: translation is the smallest part of the job
• B2B email marketing in Europe: why consent rules differ between Germany, France and the UK
• All insight articles