There are ways to work around that, though it requires the developer to create some server infrastructure.

Edit: Also pretending that using Apple is fine is not secure - Apple can provide the data (given it's a US based company) if law enforcement asks, so not knowing them personally doesn't change much.