Apple and Google have announced updates to their mobile platforms in Japan to comply with the Mobile Software Competition Act (MSCA). The law requires companies to provide users with additional choices for app distribution, payment methods, and default services while maintaining privacy and security.
App distribution changes
The MSCA allows developers to distribute apps outside the official app stores:
Apple
iOS developers can now distribute apps via authorized alternative marketplaces. These marketplaces must meet Apple’s ongoing requirements. Apps downloaded outside the App Store do not benefit from the full App Review protections. To mitigate risks, Apple introduced Notarization, a baseline review combining automated checks and human review to verify app functionality and detect malware or security threats.
Android already permits third-party app stores. Google is expanding its User Choice Billing program to all apps offering in-app purchases of digital content. Developers can now let users choose between Google Play Billing or completing transactions on the developer’s website, with APIs and security safeguards to support safe implementation.
Payment options
Both platforms now provide alternatives to in-app purchase systems:
Apple
iOS apps can integrate alternative payment methods or link users to external websites, in addition to Apple In-App Purchase. Transactions through Apple continue to offer refund support, subscription management, and reporting tools. Apps distributed outside the App Store pay a 5% Core Technology Commission, reflecting access to Apple’s tools and services.
Android apps can offer purchases via Google Play Billing or external websites. The expanded program ensures security standards and user protection, with competitive fees for developers and APIs for integration.
User safety and safeguards
Both companies emphasized measures to protect users, especially children, from risks associated with alternative app distribution and payment methods:
Apple
Apps targeting children cannot link to external payment sites. Apps using alternative payments must include parental gates for users under 18. Users under 13 cannot access apps with links to external transactions. Apple continues to provide content filters, screen time monitoring, and communication safety tools.
The company highlighted the importance of cybersecurity, privacy, and user safety, noting that 79% of Japanese developers expressed concern about risks associated with in-app content outside major stores. Google is collaborating with the Japan Fair Trade Commission (JFTC) to implement safeguards and prevent unintended consequences.
Expanded controls and choice
Both platforms have added options for users to select preferred services:
Apple
iOS 26.2 introduces browser and search engine choice screens, default controls for navigation apps and app marketplaces, new APIs for voice-based apps, and processes for interoperability with core iPhone technologies.
Android users can switch default browsers and search engines. Google supports alternative browser engines, authentication services, and maintains data portability through Google Takeout across more than 80 products.
Developer support and updated terms
Guidance and terms have been updated for developers:
Apple
Developers can access resources on the Apple Developer Support page. Business terms include reduced commissions: 10% for most developers, 21% for certain digital transactions, and 5% Core Technology Commission for apps outside the App Store.
Developers can begin onboarding to the updated billing program and access APIs. Google emphasizes careful regulatory engagement to maintain security and avoid unintended risks.
Outlook
The MSCA introduces new requirements for app distribution, payment processing, and default services in Japan. Apple and Google are implementing technical, procedural, and regulatory measures to mitigate potential risks, including fraud, scams, and exposure to inappropriate content.
Both companies will continue to collaborate with Japanese regulators and the developer community to refine compliance processes, monitor emerging risks, and ensure that app ecosystems remain secure, functional, and adaptable to future regulatory updates.