App Store guideline 4.8: Login Services
An app that signs people in through a third-party or social service for their main account must also offer an equivalent sign-in option with privacy-protecting features. Unofficial explanation, not affiliated with Apple. Apple's text prevails.
- Guideline
- 4.8 Login Services
- Section
- 4. Design
- This page
- Unofficial explanation, not affiliated with Apple. Apple's text prevails.
- Version
- Guidelines last updated October 16, 2026
- Official source
- Apple's App Review Guidelines
What it means
- The guideline names services such as Facebook Login, Google Sign-In and WeChat Login as examples of third-party or social logins.
- The equivalent sign-in may collect only the user's name and email address, has to let users hide their email address while creating an account, and may not gather app interactions for advertising unless the user agrees.
- A user's primary account is the account they set up with the app to identify themselves, sign in and use its features and associated services.
- Another login service is not required in these cases: the app only uses the company's own account setup and sign-in systems; the app is an alternative app marketplace, or comes from one, and uses a login specific to that marketplace for accounts, downloads and purchases; the app is for education, enterprise or business use and needs an existing education or enterprise account; the app uses a citizen identification system or electronic ID backed by a government or industry; the app is a client for one particular outside service, where users have to sign in straight to their email, social media or other external account to reach their content.
Apple's text
This page is an unofficial explanation in our own words. Unofficial explanation, not affiliated with Apple. Apple's text prevails. Apple's wording is on its page, linked below.
Want the guidelines grouped by app type?
If we publish the guidelines grouped by what you are building (subscriptions, kids apps, sign-in), we write to you once. We use the email for nothing else.