App Review

RSS for tag

App review is the process of evaluating apps and app updates submitted to the App Store to ensure they are reliable, perform as expected, and follow Apple guidelines.

Posts under App Review tag

200 Posts
Sort by:

Post

Replies

Boosts

Views

Activity

ITMS-90338: Non-public API usage - _CMTimebaseCopyMasterTimebase
Getting the following incorrect error when uploading to App Store Connect. I've tried with Xcode and Transporter. The APIs are not being referenced anywhere in my project. There was a similar issue to this on the forum a couple weeks ago and it sounded like Apple resolved it but I am just now seeing this happen. Message: ITMS-90338: Non-public API usage - The app references non-public symbols in APP_NAME: _CMTimebaseCopyMasterTimebase, _CMTimebaseCreateWithMasterClock, _CMTimebaseCreateWithMasterTimebase. If method names in your source code match the private Apple APIs listed above, altering your method names will help prevent this app from being flagged in future submissions.
1
1
819
Jul ’23
Signing and deploying an app on a client developer account without access
We created a multi-tenant SaaS platform to create content and configure individual mobile apps. In other words, we build apps for customers and we take care of deploying and maintaining these apps on their developer accounts, given that they are comfortable with giving us access to it. But in some cases, especially with government or military customers, they cannot add us to their developer accounts, and/or they cannot send us their signing certificates so we can sign the builds with them. Does Apple have any alternative ways to deploy an app that WE OWN the code to, sign it, and ship it onto a client's developer account so that the app become publicly accessible on the app store? To my knowledge, the only way currently is through Apple Business Managed accounts and/or MDM, which is would NOT make the app publicly available on the app store.
1
0
431
Jul ’23
How to declare Privacy manifest
It is stated that From Fall 2023 you’ll receive an email from Apple if you upload an app to App Store Connect that uses required reason API without describing the reason in its privacy manifest file. From Spring 2024, apps that don’t describe their use of required reason API in their privacy manifest file won’t be accepted by App Store Connect. There are some answers here : https://developer.apple.com/videos/play/wwdc2023/10060/ but far from answering all questions. I have questions on how to implement: Where exactly is the privacy manifest ? How to create it, from which file template in Xcode ? WWDC speaks of a PrivacyInfo.xcprivacy (does it require a more recent version of Xcode than 14.2). WWDC describes a framework case. Is it the same for a "final" app ? is there a specific format for describing the reason ? Or just plain text. Is this text visible to the user or only to reviewer ? does it apply retroactively to apps already in AppStore (do they need to be resubmitted ?). It seems not. So I tried, in an iOS App, to declare the PrivacyInfo.xcprivacy as explained, with Xcode 14.2, using plist template, to no avail. Really not clear on how to proceed or even start… We would need a clear step by step tutorial with all prerequisites (Xcode or MacOS versions needed for instance).
14
1
14k
Apr ’24
"Required Reason" API - stat()
I've just been looking at this list of APIs for which we will be soon be required to declare a "required reason" in the app's privacy manifest: https://developer.apple.com/documentation/bundleresources/privacy_manifest_files/describing_use_of_required_reason_api One of the listed functions is stat(). The rationale seems to be that a malicious app can use stat to get the timestamps of files outside the app container, thereby "fingerprinting" the device. The allowed reasons that we can declare are : To get timestamps that are displayed to the user. To get timestamps of files that are within the app's container. To get timestamps of files that the user has granted access to. I am concerned that this does not include many of the legitimate non-timestamp uses of stat(). For example, it can be used simply to test if a file exists, or to test whether a path refers to a file or a directory, or to check if two paths refer to the same file (e.g. via different symlinks), or to get the size of a file. Some of these things can be achieved in other ways; for example, I can check if a file exists by trying to open() it and checking for an error, and I can get the file size by opening it and calling lseek(SEEK_END). Maybe I can check if two paths are equivalent by using readlink() to form canonical paths for both and comparing them. But I bet there are other things that can't be done. I could probably fix all of my code to not call stat() for non-timestamp reasons in a few hours. It would be more difficult to fix the various open-source libraries that I use. What do you think we should all be doing?: "File a bug" asking for an additional reason for using stat(), i.e. to get non-timestamp information about files in the app's container. Deliberately mis-read allowed reason C617.1, "to access the timestamps of files inside the app container", as " to access the timestamps and other metadata of files inside the app container", and declare that in the privacy manifest. Change code to not call stat(). Any other suggestions? P.S. I guess that libc++ std::filesystem calls stat(). What is the status of using that? The std::filesystem functions that access file timestamps are not listed on the page linked above. If I call std::exists() to check if a file exists, and assuming that is implemented using stat(), will that trigger the new filter?
11
1
2.9k
Dec ’23
Guideline 5.2.1 - Legal - Intellectual Property
Hello, I'm publishing free IOS app with my own name and Individual account. The app use to control my DIY hardware via Bluetooth. I called the App and the Hardware it control with my own name "***". There are no trademark with that name registered. My app has been rejected with the following reply: Guideline 5.2.1 - Legal - Intellectual Property Your app includes content or features from "***", or is marketed to control external hardware from "***", without the necessary authorization. The inclusion of third-party content within your app, whether retrieved from the internet by the app or embedded in the app, is subject to the terms of the Apple Developer Program License Agreement. Your app and its contents should not infringe upon the rights of another party. In the event your app infringes another party’s rights, you are responsible for any liability to Apple because of a claim. Next Steps To resolve this issue, please attach documentary evidence in the App Review Information section in App Store Connect demonstrating authorization/ownership between "***" and "MyName". Once we have reviewed your documentation and confirmed its validity, we will proceed with the review of your app. Alternatively, please remove the third-party content from your app and its metadata. Please help. I don't know how to resolve this problem. How can I prove the "***" name belong to me or just a random name that I named they? Or how can I remove the "***" from my app because it's my App name? Any help would be appreciated. Thanks.
5
0
1.1k
Aug ’23
Uploading an app using - assetFile on macOS
Uploading an IPA using /usr/local/itms/bin/iTMSTransporter -m upload -assetFile -u -p -v informational -asc_provider method, if an application successfully uploads for the first time and the version of the IPA+1, it will be rejected upon upload. The reason for rejection is: Package Summary: 1 package(s) were not uploaded because they had problems: /Users/****/Desktop/3/app.ipa - Error Messages: Upload is not in processing state, please try again. state: class Build { type: builds id: 873e65d2-7cb2-4acf-868b-7f95c6893784 attributes: class BuildAttributes { version: 1 uploadedDate: 2023-08-01T23:48:33.661-07:00 expirationDate: null expired: null minOsVersion: null lsMinimumSystemVersion: null computedMinMacOsVersion: null iconAssetToken: null
0
0
281
Aug ’23
APP review Rejected for iPad, OS version 16.6
Hi. My app is already in the App Store. but I need to change the homepage UI of my app. After changing the UI when I submit the app for review, the reviewer rejected the app saying **"We were unable to review your app as it crashed on launch. We have attached detailed crash logs to help troubleshoot this issue. Review device details: Device type: iPad OS version: iOS 16.6"** but I have successfully built this app after changing the UI. no issue occurred in: iPhone 14 pro (simulator) os version 16.4, iPad Pro 6 gen (simulator) os version 16.4 iPhone 13 Pro (physical device) os version 16.6 iPad Pro (simulator) os version 17 the app is running from all these devices without any crashing issues. but the reviewer said that they can't review the app because of the crash on launch issue. I am attaching the crash reports in the attachment. app_crash_report_1 app_crash_report_2
4
1
1.5k
Aug ’23
Clicking 'Add for Review' for iOS app not working
When I click the Add for Review button, the progress indicator spins for a bit then goes away. There is no error message and nothing appears to have changed. The status still shows as 'Prepare for Submission.' This is an existing app that already has a current build in the app store and the changes made in this version are pretty small. Anyone have any ideas what could be happening? Thanks
0
0
322
Aug ’23
[App Rejected - iPad13,16 crash] How to symbolicate crash files without XCode
Hello, I recently received a rejection submitting an app because of a crash on iPad13,16. I have tested the app with xcrun simctl on the following device iPad model: iPad Air (5th generation) (27BB2DC4-D599-4EF8-96A9-7E527337F95D) and I am not able to reproduce the crash. In order to proceed fixing the issue, I would like to symbolicate the crash files sent by the validation team. The thing is, the app has been created with React Native on VS Code, thus, I am not able to import it on XCode to proceed to the crash file symbolication nor to generate the dSYM file in order to use the atos command line tool. I would like to know if you have any suggestion so I can move on fixing the crash and publish the app as soon as possible please? Thank you crashlog-DFBDCF7C-6849-474B-B0A6-F16D182FBAA3.txt
2
0
825
Aug ’23
A Leak in the iPhone App Store, Just on iPhone, Spammers are Affecting the keyword suggested apps, It needs serious attention
It is in the iPhone App Store of Australia, Canada, Germany, France,... Recently, The Spam applications have been growing in the App Store and these apps are using fake activities to upgrade the rank of their apps in the App Store. They have a trick to deceive the App Store for accepting their spam and duplicated apps. The trick is that these scammers design their app only for iPhone and only in a specific language and then request to release the app in that specific country. They had find this leak to deceive the App store in order to have their spam apps to be accepted in the Appstore for publishing, They know very well that the App store accepts their spam apps, because the app store mainly accepts apps in a certain language, no matter if they are duplicate or spam apps, the App Store will accept. This is the leak. Please be notified that this trick is working just for iPhone apps. After a while, They add new languages and ask to be published in the App Store of different countries by adding different languages to the app, One by one, and then with the help of too many bot downloads and posting fake high rates and reviews, Their apps will be the first ranked suggested app in important and popular keywords, Even without paying for Search Ads or so. This is quite evident in the stores of Canada, Australia and Germany, Kindly please search the keyword “PDF editor” in the store of Canada And check the activity of thi app : https://apps.apple.com/us/app/pdf-converter-pdf-viewer/id6449454399 This is a new app, With no feedback from the users, But this is the first app ranked in the keyword “PDF Editor” in the Canada App Store, This is happening just by using bots to make too many downloads on this keyword for this app, If you check it deeply, You will find out most of the parts of this app is not available in English yet while they add English Language like Payment forms. These are other apps who are using this method to publish their apps and making their apps high ranked in important keywords by using the described fake activities, https://apps.apple.com/us/app/pdf-editor-sign-fill-more/id6447789797 https://apps.apple.com/us/app/pdf-editor-sign-fill-docs/id6452676035 https://apps.apple.com/us/app/edit-fill-pdf-sign-docs/id6449665066 You should consider that affecting the App store algorithms are against the App store guidelines, and these apps are exactly doing this and all these activities are against App Store guidelines, So you should take this report seriously. This leak has been in the App Store for a long time and I reported before many times but it seems it is not clearing deeply.
4
2
1.2k
Aug ’23
App review rejected
Hy guys. Some days ago I sent to Apple my first app for review but it was rejected cause of crash. By the way they wrote that they tested my app on iphone13 mini and iPad Air (5th generation) with IOS16.4 but it get crash after the launch. I have an old device (iphone7 IOS15.7) and the app works good without error or crash. Attached this message you can find the crashlog files. Can someone help me to fix this bug? Thanks in advance to everyone. crashlog-00A0051A-EDFE-466F-BEC6-9B52E2FA1280.txt crashlog-8FDC63F5-28AA-484C-A701-0AACAB9E8324.txt crashlog-8007C03A-EAC7-4332-BA03-6272CE245A2C.crash crashlog-EBCB9333-06DB-4C73-A6CF-26FDCB77DA03.txt
0
0
372
Aug ’23
Access to External Mechanisms for Subscriptions - How to Resolve This Issue
Dear Experts, My app is getting rejected by the app store review team specifically due to: "Your app includes an account registration feature for businesses and organizations, which is considered access to external mechanisms for purchases or subscriptions to be used in the app" We have designed an app that solves a problem for businesses and organizations. The business must have the ability to register their new account and enroll in the service through the app. Why would Apple disallow this? My app cannot work if users cannot create an account and enroll. This is very confusing to me. Once users enroll in the app, they must enter credit card information to give access to their employees. Apple will earn revenue when users subscribe. I am confused as to where the issue is. Any advice on how to get around this issue? I see no other way that businesses can subscribe to the app.
0
0
263
Aug ’23
Unlisted app and SPAM 4.3 rejection
Hello, I would like to know, in case you received a rejection for SPAM 4.3 because there are similar apps on the app store if asking for the app to be released unlisted would solve the problem, as it would not be listed in the app store and would not cause confusion to users. Also the app in question is quite a niche app and it would be enough to distribute it via a link from our website. The app is free. Thank you.
0
0
330
Aug ’23
Augmented reality app store review
Hello everyone, I am trying to publish an augmented reality app into app store. I have prepared physical book and the app is used to scan some pages of that book and view some of the images in 3D. The app was rejected with "apps cannot require users to purchase unrelated products or engage in advertising or marketing activities to unlock app functionality" because image markers (my book) needed for it. Should I add in-app purchase to buy the book(it is free at the moment). I have seen toys being operated with apps. Just trying to understand how they would solve this issue because similar to my case the toy needs to be bought/obtained separately. Thank you.
0
0
404
Aug ’23
Can we use clock_gettime_nsec_np(CLOCK_MONOTONIC_RAW) in IOS?
Hello! We develop IOS application and it’s necessary for us to check if user changed the device time in Device settings or not. We use function "clock_gettime_nsec_np(CLOCK_MONOTONIC_RAW)" to check time and it works perfect. But I saw this function only here in Documentation(in discussion section): https://developer.apple.com/documentation/kernel/1646199-mach_continuous_time and this is for Mac OS so I want to know if I can use this function in IOS application that we are going to submit to App Store or we can face with some problems? For example this function can not work on some iPhones or on some IOS or we can have some problems during the review the application in App Store? Or maybe there are some alternatives function "clock_gettime_nsec_np(CLOCK_MONOTONIC_RAW)" for IOS? We tried to use ProcessInfo.processInfo.systemUptime but it counts only when device is awaken. So we can't use it to check if user changed the device time in Device settings or not.( Thank you for any help in advance!
1
0
1.2k
Aug ’23