Only Apple can say what the status of their scanning is. My understanding is that submitting for review does trigger the scans. There are some interpretations of the rules that suggest that resubmitting the app with the same SDKs that were already approved for the app will not be rejected. Perhaps you experience is this rule in action. This developer forums post suggests that apps are being rejected due to issues with privacy manifests: ITMS-91054: Invalid API category declaration
Topic:
Privacy & Security
SubTopic:
General
Tags: