Discuss how to secure user data, respect user data preferences, support iCloud Private Relay and Mail Privacy Protection, replace CAPTCHAs with Private Access Tokens, and more. Ask about Privacy nutrition labels, Privacy manifests, and more.

Posts under Privacy tag

147 Posts

Post

Replies

Boosts

Views

Activity

XCTest Bundle cannot access local network.
We’re having an iPad issue accessing the local network with iPadOS 26.3. We have an automation system that tests our app on an iPad using accessibility tags. the XCTest test code sends messages from the iPad via TCP/IP to setup external test equipment. The messages abruptly stopped transmitting across the iPad blood-brain barrier with iPadOS 26.3 (26.2.1 and earlier works fine). The technique that worked involved installing a helper app with the same bundleID as our app, allowing the helper app to access the network, and when our app runs it has network access through the helper. It’s clever and kludgey. Forums that we referenced in the past: https://developer.apple.com/forums/thread/663858 TN3179: Understanding local network privacy | Apple Developer Documentation I suspect that something was changed in 26.3 that closed our window. I need two things: ID what is different in 26.3 and fix the automation system. If there’s a new way for XCUITest code to access the local network I’m happy to try it out.
8
0
161
3w
The app appears to share the user’s personal data with a third-party AI service
Hi, I am publishing an app for the first time. Need help. My app helps user in digitizing voice notes along with visiting cards for Expo sales leaders. The app uses Gemini AI at the backend for analyzing this data. But, the app does not send any 'user data' i.e. user name, email etc to AI. I got the following observation. The app appears to share the user’s personal data with a third-party AI service but the app does not clearly explain what data is sent, identify who the data is sent to, and ask the user’s permission before sharing the data. Apps may only use, transmit, or share personal data after they meet all of the following requirements: Disclose what data will be sent Specify who the data is sent to Obtain the user’s permission before sending data Identify in the privacy policy what data the app collects, how it collects that data, all uses of that data, and confirm any third party the app shares data with provides the same or equal protection What should I do? Should I mention that the app does not send any user data to the third party AI? Should I declare this data in the app privacy section? Thanks in advance!
0
0
59
3w
Guideline 5.1.1 - Legal - Privacy - Data Collection and Storage
I have the issues in this particular guideline: Issue Description We noticed that the app requires users to register with personal information to purchase In-App Purchase products that are not account based. Apps cannot require user registration prior to allowing access to app content and features that are not associated specifically to the user. User registration that requires the sharing of personal information must be optional or tied to account-specific functionality. Next Steps To resolve this issue, please revise the app to not require users to register before purchasing In-App Purchase products that are not account based. You may explain to the user that registering will enable them to access the purchased content from any of their supported devices and provide them a way to register at any time, if they wish to later extend access to additional devices. Please note that although guideline 5.1.1 requires an app to make subscription content available to all the supported devices owned by a single user, it is not appropriate to force user registration to meet this requirement; such user registration must be optional. For this issue, I have revised my app accordingly many times, but it still get rejected even though I believe that I have revised my app accordingly. My app name is Wallpaperlogoart and my app ID is 6744837826. I would like Apple to look into this issue again in my app submission. I am looking forward to hearing from you soon.
1
0
79
2w
Guideline 5.1.1 - Legal - Privacy - Data Collection and Storage
I have the issues in this particular guideline: Issue Description We noticed that the app requires users to register with personal information to purchase In-App Purchase products that are not account based. Apps cannot require user registration prior to allowing access to app content and features that are not associated specifically to the user. User registration that requires the sharing of personal information must be optional or tied to account-specific functionality. Next Steps To resolve this issue, please revise the app to not require users to register before purchasing In-App Purchase products that are not account based. You may explain to the user that registering will enable them to access the purchased content from any of their supported devices and provide them a way to register at any time, if they wish to later extend access to additional devices. Please note that although guideline 5.1.1 requires an app to make subscription content available to all the supported devices owned by a single user, it is not appropriate to force user registration to meet this requirement; such user registration must be optional. For this issue, I have revised my app accordingly many times, but it still get rejected even though I believe that I have revised my app accordingly. My app name is Wallpaperlogoart and my app ID
1
0
82
2w
Submission Rejected-5.1.1
Hello all, I've been running into issues with my initial App Review Submission getting rejected, with the following message: Guideline 5.1.1(v) - Legal - Privacy - Data Collection and Storage Issue Description The app still requires users to register or log in to access features that are not account based. Next Steps Revise the app to let users freely access the app's features that are not account based. The app may still require registration for other features that are account based. The app itself is a fairly simple grocery listing/receipt tracking/meal planning tool, in which users can share their groceries/receipts/meals in a group. I've revised my app to allow new users to see the main UI shell without signing in, but object creation is still blocked without account membership. Objects are tied to users-- being able to see what other users in your group have created is the core functionality of the app, and there's literally nothing else it does at the moment-- no offline features yet that could theoretically not need any account. How can I revise this to pass the review? I've changed the initial login gate significantly, adding the "Continue without signing in", plenty of info describing the app and why accounts are necessary, and lots of correspondence back and forth with the App Review team, but I keep getting rejected and I'm not sure how to move forward from here. Thank you all for your time and help!
1
0
55
1w
Apple Rejection
Thank you for submitting an update to the app, Macy's: Online Shopping & Save, for review. We noticed some issues that require your attention. Please see below for additional information. If you have any questions, we are here to help. Reply to this message in App Store Connect and let us know. Review Environment Submission ID: d429df7a-35c1-4b8f-a85f-c0cce2dcd376 Review date: March 26, 2026 Review Device: iPhone 17 Pro Max Version reviewed: 2603.4.0 Guideline 5.1.2(iii) - Legal - Privacy - Data Use and Sharing Issue Description The app includes fingerprinting functionality that is designed to identify the user or device. Specifically, the app aggregates user and device data to track the user, either directly or indirectly using probabilistic methods. This functionality is found in services or code included in the app, such as AppsFlyer. Apps that fingerprint users or devices are not appropriate. Per section 3.3.9 of the Apple Developer Program License Agreement, neither you nor the app may derive data from a device in order to uniquely identify it. Next Steps Follow these steps to resolve this issue: Identify the fingerprinting functionality in the app. Some or all of this functionality may be provided by third-party SDKs. If you have questions about these SDKs, contact the SDK provider. Remove any functionality from the app that uses algorithmically converted device and usage data to identify the user or device. You should remove any related code or implemented SDKs that support fingerprinting. Since fingerprinting is never appropriate, requesting the user's permission to track them or disclosing fingerprinting activity in a privacy policy will not resolve this issue.
1
0
62
1d
XCTest Bundle cannot access local network.
We’re having an iPad issue accessing the local network with iPadOS 26.3. We have an automation system that tests our app on an iPad using accessibility tags. the XCTest test code sends messages from the iPad via TCP/IP to setup external test equipment. The messages abruptly stopped transmitting across the iPad blood-brain barrier with iPadOS 26.3 (26.2.1 and earlier works fine). The technique that worked involved installing a helper app with the same bundleID as our app, allowing the helper app to access the network, and when our app runs it has network access through the helper. It’s clever and kludgey. Forums that we referenced in the past: https://developer.apple.com/forums/thread/663858 TN3179: Understanding local network privacy | Apple Developer Documentation I suspect that something was changed in 26.3 that closed our window. I need two things: ID what is different in 26.3 and fix the automation system. If there’s a new way for XCUITest code to access the local network I’m happy to try it out.
Replies
8
Boosts
0
Views
161
Activity
3w
The app appears to share the user’s personal data with a third-party AI service
Hi, I am publishing an app for the first time. Need help. My app helps user in digitizing voice notes along with visiting cards for Expo sales leaders. The app uses Gemini AI at the backend for analyzing this data. But, the app does not send any 'user data' i.e. user name, email etc to AI. I got the following observation. The app appears to share the user’s personal data with a third-party AI service but the app does not clearly explain what data is sent, identify who the data is sent to, and ask the user’s permission before sharing the data. Apps may only use, transmit, or share personal data after they meet all of the following requirements: Disclose what data will be sent Specify who the data is sent to Obtain the user’s permission before sending data Identify in the privacy policy what data the app collects, how it collects that data, all uses of that data, and confirm any third party the app shares data with provides the same or equal protection What should I do? Should I mention that the app does not send any user data to the third party AI? Should I declare this data in the app privacy section? Thanks in advance!
Replies
0
Boosts
0
Views
59
Activity
3w
Guideline 5.1.1 - Legal - Privacy - Data Collection and Storage
I have the issues in this particular guideline: Issue Description We noticed that the app requires users to register with personal information to purchase In-App Purchase products that are not account based. Apps cannot require user registration prior to allowing access to app content and features that are not associated specifically to the user. User registration that requires the sharing of personal information must be optional or tied to account-specific functionality. Next Steps To resolve this issue, please revise the app to not require users to register before purchasing In-App Purchase products that are not account based. You may explain to the user that registering will enable them to access the purchased content from any of their supported devices and provide them a way to register at any time, if they wish to later extend access to additional devices. Please note that although guideline 5.1.1 requires an app to make subscription content available to all the supported devices owned by a single user, it is not appropriate to force user registration to meet this requirement; such user registration must be optional. For this issue, I have revised my app accordingly many times, but it still get rejected even though I believe that I have revised my app accordingly. My app name is Wallpaperlogoart and my app ID is 6744837826. I would like Apple to look into this issue again in my app submission. I am looking forward to hearing from you soon.
Replies
1
Boosts
0
Views
79
Activity
2w
Guideline 5.1.1 - Legal - Privacy - Data Collection and Storage
I have the issues in this particular guideline: Issue Description We noticed that the app requires users to register with personal information to purchase In-App Purchase products that are not account based. Apps cannot require user registration prior to allowing access to app content and features that are not associated specifically to the user. User registration that requires the sharing of personal information must be optional or tied to account-specific functionality. Next Steps To resolve this issue, please revise the app to not require users to register before purchasing In-App Purchase products that are not account based. You may explain to the user that registering will enable them to access the purchased content from any of their supported devices and provide them a way to register at any time, if they wish to later extend access to additional devices. Please note that although guideline 5.1.1 requires an app to make subscription content available to all the supported devices owned by a single user, it is not appropriate to force user registration to meet this requirement; such user registration must be optional. For this issue, I have revised my app accordingly many times, but it still get rejected even though I believe that I have revised my app accordingly. My app name is Wallpaperlogoart and my app ID
Replies
1
Boosts
0
Views
82
Activity
2w
Submission Rejected-5.1.1
Hello all, I've been running into issues with my initial App Review Submission getting rejected, with the following message: Guideline 5.1.1(v) - Legal - Privacy - Data Collection and Storage Issue Description The app still requires users to register or log in to access features that are not account based. Next Steps Revise the app to let users freely access the app's features that are not account based. The app may still require registration for other features that are account based. The app itself is a fairly simple grocery listing/receipt tracking/meal planning tool, in which users can share their groceries/receipts/meals in a group. I've revised my app to allow new users to see the main UI shell without signing in, but object creation is still blocked without account membership. Objects are tied to users-- being able to see what other users in your group have created is the core functionality of the app, and there's literally nothing else it does at the moment-- no offline features yet that could theoretically not need any account. How can I revise this to pass the review? I've changed the initial login gate significantly, adding the "Continue without signing in", plenty of info describing the app and why accounts are necessary, and lots of correspondence back and forth with the App Review team, but I keep getting rejected and I'm not sure how to move forward from here. Thank you all for your time and help!
Replies
1
Boosts
0
Views
55
Activity
1w
Need help learning security and persistence for Swift!!!
Hello, sorry for the awkward text formatting but I kept getting prevented from positing due to "sensitive language"... Help.txt
Replies
2
Boosts
0
Views
568
Activity
1w
Apple Rejection
Thank you for submitting an update to the app, Macy's: Online Shopping & Save, for review. We noticed some issues that require your attention. Please see below for additional information. If you have any questions, we are here to help. Reply to this message in App Store Connect and let us know. Review Environment Submission ID: d429df7a-35c1-4b8f-a85f-c0cce2dcd376 Review date: March 26, 2026 Review Device: iPhone 17 Pro Max Version reviewed: 2603.4.0 Guideline 5.1.2(iii) - Legal - Privacy - Data Use and Sharing Issue Description The app includes fingerprinting functionality that is designed to identify the user or device. Specifically, the app aggregates user and device data to track the user, either directly or indirectly using probabilistic methods. This functionality is found in services or code included in the app, such as AppsFlyer. Apps that fingerprint users or devices are not appropriate. Per section 3.3.9 of the Apple Developer Program License Agreement, neither you nor the app may derive data from a device in order to uniquely identify it. Next Steps Follow these steps to resolve this issue: Identify the fingerprinting functionality in the app. Some or all of this functionality may be provided by third-party SDKs. If you have questions about these SDKs, contact the SDK provider. Remove any functionality from the app that uses algorithmically converted device and usage data to identify the user or device. You should remove any related code or implemented SDKs that support fingerprinting. Since fingerprinting is never appropriate, requesting the user's permission to track them or disclosing fingerprinting activity in a privacy policy will not resolve this issue.
Replies
1
Boosts
0
Views
62
Activity
1d