Can I store users credit card information in a secure way in my app?

Take a look at the Keychain Services Programming Guide. That should have the information you need.

You wouldn't store credit card data on the device. That's what your server is for. While you could store it

in the keychain, that would both be illegal and likely violate Apple's own policies regarding purchases of

real world goods within an app. When dealing with credit cards, you must do things in a PCI compliant

fashion. Failing that, can result is severe penalties.

You can ask for anything. The relevant guideline is 17.2 which says you cannot 'require' that a user provide such information for the app to function. You can then use that information as agreed to between you and the user as long as you do not 1) use it to purchase something used within the app or 2) (depending on how you interpret 11.2) make a purchase transaction from within the app. The comments above, which state you may not ask for and use credit card information, are referencing the proper way of handling such information (i.e. keychain, PCI compliant, etc.) not what you are required to do - and only in that regard are they both wise and correct.

Thanks RLKingSoftware actually I will store credit card information in a back end on a remote server. So not credit card information will be placed on the device. I will review the PCI compliant stuff then.

Thanks

If I were you I'd look at using Apple Pay's API if at all possible for your proposes, this will remove much of the headache from you.