HRW: Apple removed 1,213 apps on Russian requests, nearly 60% of its global total

25.09.2026 7 min 56

Human Rights Watch published a report on 24 September on how Russia is closing off the tools people use to get around censorship. The individual events in it were reported as they happened. Put in one place, they describe something more specific than a crackdown: a state that has stopped trying to block VPN traffic and started removing the companies, the payments and the distribution instead.

One number in the report is worth pulling out before anything else. In 2025 Apple removed 1,213 applications in response to Russian requests. That was nearly 60 percent of all such removals it made anywhere in the world.

In short

  • At least 469 VPNs had been blocked in Russia by February 2026 under the 2017 law.
  • About 57 million people, roughly 40 percent of the population, are estimated to use a VPN there.
  • The pressure has moved to app stores, payment rails and the staff of VPN companies.
  • Apple and Google are now the practical chokepoint, and the removal notice Apple sent in Russia repeats word for word the one it sent in China in 2017.

What the report actually documents

The blocking itself is old news and, by the state's own measure, not working: usage estimates have stayed high through years of filtering. What changed is the target. Instead of chasing traffic, the pressure now lands on everything a VPN needs in order to exist as a product.

The clearest case in the report is Amnezia VPN in June 2026. Its addresses were blocked in bulk, its employees received phishing emails, and the service was hit with DDoS attacks. Recovery took a month and a half. None of that is content moderation or traffic filtering. It is an attack on a company.

WhenWhat happened
July 2024Apple removes 25 VPN services from the Russian App Store at Roskomnadzor's request, among them NordVPN, Proton VPN, Red Shield VPN, Planet VPN and LeVPN
February 2026A Moscow court fines Google 22.8 million rubles, about 300,000 dollars, over VPN services distributed through Google Play
February 2026At least 469 VPNs blocked under the 2017 law
March 2026Apple removes Streisand, V2Box, v2RayTun, Happ and Proxy Utility; the ministry orders the four largest mobile operators to stop letting subscribers pay Apple through phone billing
June 2026Amnezia VPN hit with bulk IP blocking, phishing against staff and DDoS; a month and a half to recover
4 August 202620 VPN providers in Russia reporting service disruptions

We covered two of the mechanisms separately as they appeared: the shift from blocking apps to blocking the hosting they run on, and the regulator's request that Russian apps detect a VPN and report what they find.

469VPNs blocked by February 2026
57 mpeople in Russia estimated to use a VPN
1 213apps Apple removed on Russian requests in 2025
20providers with disruptions on 4 August 2026

The app store is the single point of failure

A blocked address can be replaced. A blocked protocol can be disguised. What cannot be routed around is removal from the two stores through which almost every phone in the world installs software. There is no second channel on iOS, and on Android the alternatives are technical enough that most people will not use them.

This is where the story stops being Russian. When Apple removed the VPN apps in Russia in March, the notice it sent developers said the app "included content that is illegal in Russia". When Apple removed every major VPN from the Chinese App Store in July 2017, the notice said the apps "include content that is illegal in China". Same sentence, same mechanism, nine years and one country apart. The template is not specific to any government. It is available to all of them, and the same store has already been used to take down a Russian product globally when Apple pulled VK worldwide.

Of all the apps Apple removed worldwide in 2025 at a government's request, what share was removed at Russia's request?

Nearly 60 percent, according to Apple's own transparency reporting as cited by Human Rights Watch: 1,213 of the removals came from Russian requests, including 468 classed as utilities, the category that holds VPNs.

What Human Rights Watch is and is not asking for

It is worth being exact, because this report is being summarised as a demand that Apple and Google stop complying. The text is more cautious than that. It asks technology companies to resist government pressure, and asks other governments and organisations to support the tools people use to reach information. There is no itemised list of demands aimed at either company.

That caution is not timidity, it reflects the position the companies are actually in. Google was fined for distributing VPNs through Play. Apple was told that an app breaks Russian law. Refusing means fines, and eventually a question about whether the company operates in the country at all. Saying "resist pressure" is easy to write and expensive to do, and the report does not pretend otherwise.

What this changes for someone reading outside Russia

Directly, nothing today. Indirectly, it shows where the pressure actually lands. Every argument about encryption and circumvention eventually reaches a point where the state cannot break the technology, and at that point it stops trying and goes to whoever ships the software. The company in the middle is not a party to the dispute and has no particular interest in it, which is exactly what makes it the efficient place to apply pressure.

The practical reading for a user is narrower and duller: an app you rely on can disappear from your store without your device changing at all, and the copy already installed stops getting updates. That is worth knowing before it matters, and it is the reason people in heavily filtered countries keep installer files and second routes rather than trusting a store listing to stay where it is.

Is using a VPN illegal in Russia?
Using one is not criminalised for the user. What the law targets is the services and their distribution: providers that do not connect to the state filtering register, advertising of circumvention tools, and since September 2025 the promotion of such tools, which is what the Google fine rested on.
Why do Apple and Google comply?
Because refusal is enforced. Google was fined 22.8 million rubles in February over VPN services in Play. For Apple, a removal notice cites Russian law and the alternative is escalating penalties and a question about operating in the market.
If an app is removed, does my installed copy stop working?
Not immediately. Existing installs keep working, but they no longer receive updates and new users in that country cannot download them. Over time that turns into an unmaintained app, which for security software is its own problem.
Does this only happen in Russia?
No. Apple removed the major VPN apps from the Chinese App Store in 2017 using the same wording. The mechanism is a standard part of how app stores handle local law, which is precisely the point Human Rights Watch is making.
Is there any way around a store removal?
On Android, apps can be installed from outside the store, which is why the removals there bite less. On iOS there is no general equivalent, so a removal from the App Store in a country is close to final for new installs.

russiachinaapplegooglevpncensorshipsite blockinginternet freedomdigital rightsmobile appssurveillanceprivacynordvpnproton vpnhuman rights watchroskomnadzor

Read also