AppsUtility apps (scanners, VPNs, tools) playbook
Scanner, VPN, converter and cleaner apps are found through problem searches, judged on trust and dropped the moment the operating system does the same thing. Outpost targets the exact tasks people type, keeps your privacy claims honest, and shows a receipt for every action.
01 · DISCOVERY
Utility apps are found at the moment of need: someone types 'scan to pdf', 'compress video' or 'vpn' into the App Store, or searches the web for 'how to scan a document on iPhone'. Rankings depend heavily on the listing's words and ratings, so keyword choice decides who finds you. Some users come from 'alternatives to X' lists and tech blogs, and a few from Reddit threads where people ask for a tool that doesn't spy on them.
Search, scan the first few results' icons, ratings and screenshots, install, try the core task once. If it works without a surprise paywall or a wall of permissions, they keep it; if not, they delete it within minutes. Paid conversion happens when the task repeats (weekly scanning, travel VPN, regular conversions), so the free experience must solve the first job properly.
02 · CHANNELS
Ranked 5 (essential) to 1 (optional) by the research for this industry.
The main channel. Apple's keyword field is 100 characters, so leave out plurals, the word 'app' and category names, and spend it on the task words people type. Test screenshots that show the job done in one frame.
People search the web for 'how to scan a receipt to PDF' or 'how to use a VPN on public Wi-Fi'. Honest guides that show the built-in way as well as yours earn trust, links and AI-assistant citations over months.
Searches like 'CamScanner alternative' or 'free VPN without logs' come from people already deciding. Fair, specific comparisons convert well and get cited.
In a crowded results page, rating and review count often decide the tap. Ask for a rating right after a successful task, never during a failure, and reply to every critical review.
Communities like r/iphone, r/androidapps and r/privacy, plus AlternativeTo, are where people ask for a tool that doesn't overreach. Show up with specifics, not marketing copy.
BUSINESS MODEL · LIVE
The same channel can be a strong fit for a paid game and a poor one for a free one. Each line below is a rule or rating from Outpost's knowledge base, with its source; your own plan is built from your answers.
F-Droid accepts only free/libre open-source apps, strictly forbids proprietary tracking or advertising libraries (e.g. Firebase, Play Services), and flags remaining ads, tracking or non-free network dependencies as anti-features.
Apple rejects apps designed predominantly to display ads, limits display ads to the main app binary, requires interstitials to be labelled as ads with easy close/skip buttons and a way to report inappropriate ads, and bars third-party ads and analytics in Kids Category apps (except limited contextual ads from services that human-review creatives).
F-Droid accepts only free/libre open-source apps, strictly forbids proprietary tracking or advertising libraries (e.g. Firebase, Play Services), and flags remaining ads, tracking or non-free network dependencies as anti-features.
In the Microsoft Store, an app's primary content may not be advertising, ads must be clearly distinguishable, and the privacy statement must say personal data goes to the ad provider and how to opt out of interest-based ads.
Apple auto-renewable subscriptions must provide ongoing value, last at least seven days, work across all of the user's devices, and clearly describe what the user gets before asking them to subscribe.
F-Droid accepts only free/libre open-source apps, strictly forbids proprietary tracking or advertising libraries (e.g. Firebase, Play Services), and flags remaining ads, tracking or non-free network dependencies as anti-features.
Non-game PC apps in the Microsoft Store may use a secure third-party payment API or Microsoft's for in-app purchases and subscriptions and keep 100% with their own commerce, while games must use Microsoft Store in-product purchase (12% fee; 15% for apps that choose Microsoft commerce).
Non-subscription apps on Apple stores may offer a free time-limited trial only through a free (Tier 0) non-consumable IAP named 'XX-day Trial', disclosing its length and later charges before it starts.
Mac App Store apps must be sandboxed and self-contained, may not show a license screen, require license keys or use their own copy protection, and must update only through the Mac App Store.
On the App Store and Mac App Store, unlocking features, subscriptions, in-game currency, premium content or a full version must use Apple In-App Purchase, and apps may not use their own unlock mechanisms such as license keys.
Since iOS 26.5 (terms published 18 June 2026), Brazilian iOS apps may use alternative in-app payments or link out to the web: App Store commission is 21% (10% for Small Business Program members and for subscriptions after year one) plus 5% if Apple processes the payment, link-out sales within 7 days carry a 15% (or 10%) store-services commission, and alternative marketplaces carry a 5% Core Technology Commission.
Google Play user choice billing (an alternative billing system offered alongside Google Play billing, with a 4% service-fee reduction on those transactions) is available in India, and in Indonesia and Brazil under the pilot.
Since Japan's Mobile Software Competition Act took effect in December 2025 (iOS 26.2), iOS apps in Japan can be distributed through Apple-authorised alternative marketplaces and can offer alternative payment processing or web purchase links alongside Apple IAP; App Store commission is 10% or 21% plus 5% for Apple IAP, web-link purchases pay 15% (10% for reduced programs), and apps outside the App Store pay a 5% Core Technology Commission.
Apple moved to a new age-rating system; developers had to answer the updated age-rating questions by 2026-01-31 to avoid an interruption when submitting app updates.
An App Clip's uncompressed, thinned main bundle may be at most 15 MB for iOS 16 and 10 MB below iOS 16; 100 MB is allowed only for iOS 17+, digital-invocation-only clips used where reliable internet is likely.
App privacy details (the 'nutrition label'), including the data practices of third-party SDKs, are required to submit new apps and app updates to the App Store.
App Review requires final builds with working URLs, and demo account details (with the back end switched on) if the app has a login; incomplete bundles and builds that crash are rejected (Guideline 2.1).
Read from Outpost's knowledge base on Nov 8, 2026; every line links its source.
03 · YOUR FIRST MONTH
A sample month. Your own plan is built from your audit, stage and goal, and paid options only ever appear as optional boosts.
Week 1 · days 1–7
Week 2 · days 8–14
Week 3 · days 15–21
Week 4 · days 22–30
04 · WHERE TO BE LISTED
Costs are as published by each destination when the research was reviewed; check before you pay for anything.
apps.apple.com
Where most iPhone and iPad users search for and install apps. The name, subtitle and keyword field decide which searches you can appear for.
US$99/yr Apple Developer Program; 15% or 30% commission
play.google.com
The main Android storefront. New personal developer accounts must run a closed test with at least 12 testers for 14 consecutive days before production, so plan that time in.
$25 one-time registration
galaxystore.samsung.com
Samsung's own storefront on Galaxy devices, with its own search and featuring. Worth adding once your Android build is stable.
Check current terms
developer.apple.com
A Mac version of your utility gets its own listing and reaches people searching for the same task on desktop.
Included in the US$99/yr Apple Developer Program
storedeveloper.microsoft.com
Windows users search the Store for tools like PDF editors and file converters. Registration is free through storedeveloper.microsoft.com.
Free registration; commission only if you use Microsoft's commerce
f-droid.org
The open-source Android catalog, where privacy-minded users look for scanners, VPN clients and tools that don't track them.
Free (open-source apps only)
alternativeto.net
People browse it looking for alternatives to the big-name app they want to leave. List yourself against the incumbents you actually replace.
Free (optional paid priority review that doesn't buy approval)
producthunt.com
A launch-day spike and a permanent product page that also shows up on Alternatives pages. Launch only once the product is publicly available.
05 · SEARCH DEMAND
Primary search
utility app marketing
0searches a month
DataForSEO Google Ads, US/en, Oct 2026 (0/mo for the primary keyword)
Ready to act: make it easy
Learning: answer with guides
Comparing: show why you
Comparing: show why you
06 · AVOID
Apple's guidelines name flashlight and simple timer apps among the established categories where new apps need a meaningfully better experience. If your feature already ships in the OS, your marketing has to say clearly what you do better, or you won't get past review, let alone users.
A user who installs to solve one job and hits a paywall deletes the app and leaves a one-star review. Let the first job succeed, then charge for volume, extras or convenience.
Apple only allows VPN apps from developers enrolled as an organization, and they must not sell, use or disclose user data to third parties. Google Play requires a VpnService declaration form and encryption to the tunnel endpoint. 'Military-grade' copy without specifics hurts more than it helps.
Repeating words across the name, subtitle and keyword field wastes characters, and Apple advises against plurals, category names and duplicates. Spend every character on a different task word.
A scanner asking for contacts or location reads as a red flag, and Apple's guidelines say apps should only request data relevant to their core function.
07 · WHAT OUTPOST DOES
Builds a task map of the exact searches your utility should rank for and rewrites the App Store and Google Play listings around them, for you to paste in
Publishes how-to and comparison pages that show the built-in way honestly and where your app is better, aimed at search traffic that compounds
Lays out platform rules (Apple 5.4 and Google's VpnService policy for VPNs) for your listing before anything goes live
Prepares Mac App Store, Microsoft Store, Samsung Galaxy Store, F-Droid and AlternativeTo listings where they fit, for you to submit, with a receipt for each
Tracks AI-search answers for prompts like 'best free scanner app' or 'VPN that doesn't log' and reports changes
Every action Outpost takes gets a receipt: the live URL, a timestamp and what it drove, or “nothing yet”.See how receipts work
08 · QUESTIONS
Yes, if you're specific. Built-in tools cover the basic version of many tasks; people install a utility when they need more control, batch processing, a missing format or better privacy. Market that gap, not the basic task.
On iOS, Apple requires the NEVPNManager API, enrollment as an organization, a clear data declaration before purchase and a commitment not to sell or share user data. On Google Play you need to complete the VpnService declaration, including a demo video of 90 seconds or less, and encrypt traffic to the tunnel endpoint.
It's the biggest lever, but it plateaus. How-to and comparison pages on the web bring people who haven't opened the App Store yet, and they give AI assistants something to cite. That part builds over months.
Right after a task succeeds, through the platform's native prompt, and never after an error. Replying to critical reviews also shows future users that someone maintains the app.
It can help for a utility with a novel angle, especially on desktop. For a mobile scanner or converter, the lasting value is the permanent page and the Alternatives listings more than launch-day traffic.
It researches the task keywords, rewrites the listings, publishes the how-to and comparison pages, submits to the relevant stores and directories, and tracks rankings and AI-search mentions, with a receipt for every action. All plans work at $0 extra ad spend.
10 · EVIDENCE
Every fact on this page comes from one of these sources.
4.3(b) established categories (flashlight, simple timers) need a meaningfully different experience; 5.4 VPN apps must use NEVPNManager, be offered by organizations and not sell or disclose data; 5.1.1(iii) data minimization
100-character keyword field and advice to avoid plurals, category names, the word 'app' and duplicates
VpnService only for apps with VPN as core functionality, the declaration form with a demo video of 90 seconds or less, and encryption to the tunnel endpoint
New personal developer accounts need a 12-tester, 14-day closed test
Last reviewed . Search volume: DataForSEO Google Ads, US/en, Oct 2026 (0/mo for the primary keyword).
FREE WEBSITE AUDIT
Paste your website. Outpost reads it, scores your visibility, finds your competitors and shows the first fixes, free. Then the playbook above becomes your own campaign, measured in installs.
See plans and pricing