According to this iphonedevsdk.com forum post, Frenzapp uses two methods to detect other apps installed on an iOS device:
- UIApplication canOpenUrl: to check if known custom URL schemas can be opened
- A "kernel level C function", that is "authorized by apple".
What "kernel level C function" are they using? Where is it documented?