App Review

RSS for tag

App review is the process of evaluating apps and app updates submitted to the App Store to ensure they are reliable, perform as expected, and follow Apple guidelines.

Posts under App Review tag

200 Posts
Sort by:

Post

Replies

Boosts

Views

Activity

Handling ITMS-91061: Missing privacy manifest
An ITMS-91061: Missing privacy manifest rejection email looks as follows: ITMS-91061: Missing privacy manifest- Your app includes "<path/to/SDK>", which includes , an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting February 12, 2025, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements. Glossary ITMS-91061: Missing privacy manifest: An email that includes the name and path of privacy-impacting SDK(s) with no privacy manifest files in your app bundle. For more information, see https://developer.apple.com/support/third-party-SDK-requirements. : The specified privacy-impacting SDK that doesn't include a privacy manifest file. If you are the developer of the rejected app, gather the name of the SDK from the email you received from Apple, then contact the SDK's provider for an updated version that includes a valid privacy manifest. After receiving an updated version of the SDK, verify the SDK includes a valid privacy manifest file at the expected location. For more information, see Adding a privacy manifest to your app or third-party SDK. If your app includes a privacy manifest file, make sure the file only describes the privacy practices of your app. Do not add the privacy practices of the SDK to your app's privacy manifest. If the email lists multiple SDKs, repeat the above process for all of them. If you are the developer of an SDK listed in the email, publish an updated version of your SDK that includes a privacy manifest file with valid keys and values. Every privacy-impacting SDK must contain a privacy manifest file that only describes its privacy practices. To learn how to add a valid privacy manifest to your SDK, see the Additional resources section below. Additional resources Privacy manifest files Describing data use in privacy manifests Describing use of required reason API Adding a privacy manifest to your app or third-party SDK TN3182: Adding privacy tracking keys to your privacy manifest TN3183: Adding required reason API entries to your privacy manifest TN3184: Adding data collection details to your privacy manifest TN3181: Debugging an invalid privacy manifest
0
0
3.5k
2w
Termination notice and app removal
Hello, I am a first time app developer and a few days after my app was approved I got a termination notice and an app removal notice from apple without any info, proof or explanation. I do not believe I did anything wrong so I submitted an appeal within an hour after receiving the termination notice. I didn’t receive any confirmation that they received the appeal or any resolution (and it has been 16 days). I contacted support through email and got a generic response something like ‘we are working on our backlog, you need to wait’. the thing is that my account is going to be terminated in less than 2 weeks and I’m panicking and don’t know what to do. did anyone have any similar experiences and how did you resolve it? this is a part of the message I received: Upon further review of the activity associated with your Apple Developer Program membership, it's been determined that your membership, or a membership associated with your account, has been used for dishonest or fraudulent activity, in violation of the Apple Developer Program License Agreement. Given the severity of the identified issues, all apps associated with your Apple Developer Program account have been removed from the App Store and your account has been flagged for removal. Because your account has been flagged for removal, any earnings payments are paused and app transfers are disabled. Creating new accounts after receiving this message may result in the termination of the new or associated accounts. Evidence of Dishonest or Fraudulent Activity App submissions from your account have engaged in concept or feature switch schemes to evade the review process, such as dynamically populating different app content after review, submitting apps with hidden features, repeatedly submitting misleading apps, and/or submitting apps with concrete references to content that you are not authorized to provide or is otherwise not appropriate for the App Store.
0
0
21
9h
App clip size with dependency SDK in it.
I just started with App Clips so quite new to it. One of our dependencies is very big in size (85+ MB) which is making the app size almost 87MB's uncompressed and 40MB's compressed with just this dependency and no other app clip related code in it. I created a App Thinning size report for the app clip and even with bigger app clip size, I decided to upload the beta build to App Store Connect for testing purposes. On App Store Connect, app clip size is 70+ MB and to my surprise it passed the App Store Connect review and I was able to install this app clip on my device from Test Flight. If I add functionality to the app clip with this bigger dependency SDK, then the app clip size is going to increase further and am worried that it could get rejected when I push it to app store. Minimum iOS version of the app is 16.4, so my understanding is that the maximum app clip size allowed is 15MB. Am trying to figure out, how the app clip build was approved on app store connect and if dependency sizes in app clips are ignored? Attaching screenshot of App Thinning report and screenshot of App Store Connect build with this App Clip.
0
0
7
14h
Spam Rejection with no appeal response
Dear Apple Developer Community, I have been facing repeated 4.3 Spam rejections for my game on the App Store, and I am struggling to understand the reason behind it. My game is a multiplayer racing and drifting game, fully designed and developed from scratch. Every aspect—including UI, 3D assets, game mechanics, and netcode—has been built independently. While I have used some paid assets, they are strictly for visuals only (such as models and textures), not game templates or code templates. Additionally, these assets have been significantly modified to fit my game’s unique style. To address the rejection, I have made numerous changes—some major and some minor—including: Modifying gameplay elements Adjusting UI and mechanics Updating the App Store listing (title, screenshots, description, and category) Despite these efforts, I continue to receive the same 4.3 Spam rejection. I have also tried to appeal multiple times but have not received any response. My game is categorized under Racing and Simulation (with Racing as the main category), but I even tried submitting it under just Games without subcategories—yet the rejection persists. I’m truly frustrated and unsure what else I can do to resolve this issue. If anyone has faced a similar situation or has any advice on how to proceed, I would greatly appreciate your insights. Thank you in advance!
1
0
19
9h
Payment System for Peer-to-peer Parking App.
Hello, I am in the process of developing a peer-to-peer parking app and would like clarification on whether my payment system requires In-App Purchases (IAP) or if I can use custom payment system embedded in-app such as Stripe for transactions. About the App: Users can add empty parking spots they find on a map. Other users can pay to unlock a group of spot coordinates (availability is not guaranteed). Users can also host their own occupied parking spot and sell it to another user, guaranteeing availability. The app uses a virtual currency (“coins”), which represent real money and are used to pay for unlocking spots and purchasing hosted spots. Users can fund their account with coins, and coins they earn from selling spots can be cashed out via PayPal once a minimum threshold is met. Users cannot cash out coins they purchased—only the ones they earned. The funds/coins are controlled by the app’s servers acting as a middleman. If a purchase transaction occurs, the app deducts the coins from the purchaser‘s account and credits the sellers account minus service fee of the app. My Question: Since the app facilitates real-world transactions between users, can I use Stripe to allow users to purchase coins, or does Apple require In-App Purchases (IAP) for funding accounts? If not do you have any suggestions on different methods? I want to ensure compliance with App Store policies before proceeding. Thank you! Best regards, Mubin
1
0
22
10h
App Store Rejection - Guideline 4.3(b) - Spam (Dating Apps)
Hi everyone, I understand that Apple is cracking down on generic dating apps, and I totally agree that the App Store is full of low-effort clones. However, our app is a legitimate business with a real user base actively requesting an app version. Been operational since 2020 and serves users in Australia, the US, Canada, and Brazil, with over 57,000 monthly active users (MAUs). This isn’t a reskinned template or a quick-fix dating app—it’s an extension of a platform that users already trust and rely on. Our unique features include: Disappearing Photos & Voice Notes – Messages auto-delete after being viewed for better privacy. Private Galleries with Revocable Access – Users can share and revoke access to private albums anytime. We explained these points in our App Review Notes, but Apple keeps rejecting the app with the same template response about "duplicate content in a saturated category." Has anyone successfully overcome this type of rejection for a dating app? Any advice would be greatly appreciated!
1
0
39
2d
App rejected for being unable to log in with Apple, using Spotify API
Hi everyone. My app "FriendActivity for Spotify" is a third party app that uses the Spotify API. As such, I need the user to log into their Spotify account. This has been going well for 3 years, but today, I got rejected trying to push an update. The reason is: "Unable to log in with an Apple account". This is because if you attempt to log in with an Apple account that isn't connected to a Spotify account, Spotify sends you back to the login screen, stating that no account associated with your Apple ID was found. I understand that the Apple store reviewers want a smooth experience where it should have automatically created a Spotify account, but this is out of my hands. It is completely unreasonable that my app is held up but the official Spotify app as well as the 1000s of third party apps are on the store, considering all of us share the same login flow decided by Spotify. It is completely irrational. I have replied with similar messages on the App review page, but the store reviewer keeps sending me the same rejection, copy pasted. I truly do not know what to do. This update was an urgent bugfix, as my user's haven't been able to access my app for the past week. Any suggestions recommended.
1
0
30
3d
Connections application with 4,000 pre-sign ups rejected unfairly - 4.3
For the last 2 years, our team at Panda has had one goal in mind: to change the failing connection application industry. The business model is severely flawed - evidenced in decline of users in match group etc (all public info). We are building the only connections app in the market without paid features – "We Don't Play Games”. This in itself revolutionizes a space which currently commodifies human connection; true connections aren’t forged through super-likes, platinum memberships and such pay-to-win models, where users that don’t pay are unfairly disadvantaged. Key Differentiators: Never having paid features 50/50 Male-Female Ratio: Our app will ensure a balanced male-to-female ratio, something not found in other apps, especially in countries like India, where dating apps are dominated by men. This helps create a healthier, more equitable user experience for all genders. In a country like India, how can any connections app succeed with 99.9% men and 0.1% women? Panda Duos: A first-of-its-kind feature where two sets of best friends can match with each other – an industry-first that no other major connections app offers. These elements, along with the app's core ethos, make Panda unique in an otherwise saturated market. The traditional models used by Match Group/Bumble are failing, as shown in their earnings reports, because they rely on a pay-to-win approach that doesn't deliver real value. Given these unique aspects, having received 4,550+ pre sign-ups, and our backing by a top VC, we strongly believe that Panda will offer an entirely different experience to users and remake a failing industry. This is not what Apple stands for, goes against fairness, and undermines the trust and respect that it should have as the only app store for iOS phones.
3
0
59
3d
Help on medical app issues about "Physical Harm"
Hello everyone: we are developing a medical app which provides medications records and taking medication reminders, the user can read medical articles related with their health. When submitting the app, it was rejected and reported the app violates 1.4.1 Physical Harm, the response listed two snapshot images, I read "1.4.1 Physical Harm", and I don't think the functions in the snapshot violate the rule, but the response didn't provide more text explanation, and I was unable to get more feedback, so I want to get help from the community. The first snapshot is a medical article displaying in the app's webView(the articles link is drugs.com link), we don't create any articles or modify articles, the app only display the web page in webView(via web link), the user can view the article source easily and can open it in system browser by clicking the link icon on the top right corner. Does this violate "Physical harm guideline"? what I can make improvement is: not display the article in app's webview, and launch the system browser to show the web page directly, but I think the UI interaction is not good. The second snapshot is an introduction screen of our new AI service in website, this screen don't have any medical information or medication decisions, it is rather like an advertisement, I don't think it violates the "Physical harm guideline". Does anyone have similar experience? and give me some suggestions? Thank you!
4
0
65
1w
Xcode 16 Supports iOS 12 Deployment Despite Official iOS 13 Minimum - Will This Continue?
I've noticed that despite Apple stating Xcode 16's minimum deployment target is iOS 13, I was able to set my app's minimum target to iOS 12, build it, and successfully upload it to TestFlight. I've tested the app on iOS 12 devices, and it functions normally. Given that updating to Xcode 16 will be mandatory after April 24th, I have a few questions: Is it intentional that Xcode 16 still allows targeting iOS 12? Will Apple continue to support this capability for iOS 12 devices in the future? Are there any plans to restrict or block apps targeting iOS 12 in upcoming Xcode updates? I'm seeking clarification on whether it's safe to continue supporting iOS 12 in our apps or if we should prepare for potential changes. Any insights from the Apple development team would be greatly appreciated.
1
0
32
1w
Question about revoke the token in 'Sign in with Apple'
News link: https://developer.apple.com/news/?id=12m75xbj If your app offers Sign in with Apple, you’ll need to use the Sign in with Apple REST API to revoke user tokens when deleting an account. I'm not good English. I'm confused about the above sentence Do I have to use REST API unconditionally or can I just delete to the account data?
0
0
100
1w