Code found in the iOS 27 beta suggests Apple has built a system that could restrict leased devices when customers fall behind on payments. Here are the details.

A bit of context

Earlier today, Bloomberg reported that Apple may soon debut a new Apple Upgrade leasing program in the US, allowing customers to make lower monthly payments for hardware purchases. According to the report, Apple is partnering with Klarna to finance the program, which would cover most iPhone, Mac, iPad, and Apple Watch models. Leases for iPhones and Apple Watches would reportedly run for 24 months, while Mac and iPad leases would last 36 months.

Bloomberg says customers would be able to pay off their device or upgrade to a new model before the lease ends, potentially for an additional fee. At the end of the term, they could either keep the device or return it, much like a car lease. This model is not entirely new for Apple; the company has offered iPhone Upgrade Program in the US since 2015, though that was a loan rather than a lease. The new Apple Upgrade program would be a true lease, with Klarna as the financial partner handling credit checks and payments.

The shift to a lease model could make Apple devices more accessible to a broader audience, especially those who prefer lower upfront costs. However, it also introduces new risks for consumers, particularly around device restrictions if payments are missed. This is where iOS 27 code becomes relevant.

What iOS 27 reveals

9to5Mac can now confirm that code found in the iOS 27 beta appears to reveal a broader system for managing a financed iPhone, including the ability to restrict apps and services when payments are missed. The code describes a system called App Managed Features, which allows an authorized financing or provider app to enroll an iPhone and perform ongoing status checks.

If the contract is no longer in good standing, Apple's system services can place the iPhone in Restricted Mode, which blocks access to most apps until the payment or contract issue is resolved, while keeping a small set of apps available. The fixed allowlist currently found in the iOS 27 beta includes:

• Accessibility Reader
• App Store
• Health
• Magnifier
• Phone
• Clock
• Settings
• Wallet
• Passwords
• The Restricted Mode interface itself

Apps that can send critical alerts, such as Messages, Home, and certain medication or safety apps, may also remain accessible. However, the provider appears to have some control over those exceptions. This means that while a user might still receive emergency alerts or phone calls, they would lose access to social media, streaming services, banking apps, and many other tools.

The code does not appear to cancel, suspend, or otherwise modify App Store subscriptions associated with blocked apps. As a result, a subscription could continue billing even while access to its app is restricted. This could lead to unexpected charges for users who are already struggling financially. Additionally, there isn't a fixed number of missed payments that automatically triggers the restrictions. The financing provider's app decides when to lock the device based on its own policies, which could vary between partners.

Finally, the new framework also introduces a new type of activation lock called Partner Finance Lock, which is meant to prevent users from erasing, reselling, or stripping a restricted device for parts. This framework lives inside Find My, but to be clear, the financing partner does not have access to the device's location. The integration is only there to keep the finance lock in place, even if the device is erased or restored.

In light of Bloomberg's report that Apple Upgrade will launch next week, 9to5Mac looked for these code references in the iOS 26.6 RC released yesterday, but could not find them. This likely means the company will either add the necessary code to the final iOS 26.6 release, or launch Apple Upgrade at a later date. It is also important to note that these findings are based on the current implementation of frameworks included in the iOS 27 beta, so some details may change before release. However, the references described above are unequivocally present in the current code.

The implications of this system are significant. For years, Apple has marketed privacy and user control as core values. Yet this mechanism gives financing partners the ability to effectively brick a device remotely, albeit temporarily. This could be seen as a necessary step to reduce fraud and ensure lease compliance, but it also raises concerns about consumer protection. For example, what happens if a user disputes a charge or the provider makes a mistake? The system appears to have no built-in appeals process within the code, though Apple may design one later.

Comparisons can be drawn to existing practices in the automotive industry, where car leases often include GPS-based repurchase options, but rarely do they remotely disable the vehicle. In the tech world, device lockdowns are common in enterprise environments (MDM), but consumer-facing restrictions are rare. Apple's approach could set a precedent for other manufacturers. Competitors like Samsung or Google might follow suit if the program is successful, potentially leading to a new norm where every financed device has a kill switch.

From a technical perspective, the implementation is sophisticated. The App Managed Features framework appears to be a new entitlement-based system that works in conjunction with existing MDM capabilities. It likely uses Apple's FairPlay or similar technology to enforce restrictions at the OS level. The inclusion of the Wallet app in the allowlist is notable, as it suggests that Apple Pay and digital keys would remain functional, allowing users to continue paying for the device using the same phone.

The partnership with Klarna adds another layer. Klarna is a Swedish fintech company known for buy-now-pay-later services. Its involvement suggests that Apple is targeting a younger, credit-conscious demographic. Klarna's integration into the Apple Upgrade program could be seamless, using the Klarna app as the financing provider app that enrolls the device and monitors payments. The code mentions that the provider's app decides when to lock the device, so Klarna would set its own grace periods and policies.

Consumer advocates will likely scrutinize this system. While Apple has historically been responsive to feedback, the company has not yet commented on these findings. The lack of a fixed number of missed payments before restrictions kick in could lead to inconsistent enforcement across different providers. Additionally, the fact that subscriptions continue to bill even while apps are blocked could violate certain consumer protection laws in jurisdictions like the European Union, which require transparent billing practices.

The timing of this discovery is also noteworthy. iOS 27 is expected to be released in September 2026, alongside new iPhone models. Apple typically seeds betas to developers in June at WWDC, so the code is still in early stages. There is ample time for Apple to modify the implementation based on feedback or legal concerns. However, the presence of such a comprehensive system suggests that the feature is planned for a future OS update, not necessarily iOS 27 final.

In summary, the code in iOS 27 beta provides a clear blueprint for how Apple intends to manage leased devices. The system is powerful but carries risks for consumers. It remains to be seen how Apple will balance its business needs with user rights. As always, we will continue to monitor the situation.

What's your take on these findings? Let us know in the comments.

Source: 9to5Mac News