App Store guideline 5.1.1: Data Collection and Storage

What it means

• (i) Privacy policies: every app links to its privacy policy from the App Store Connect metadata field and from inside the app, in an easy-to-find place. The policy must say clearly what data the app or service collects, how, and every use made of it; confirm that any third party receiving user data (analytics tools, ad networks, third-party SDKs, parent, subsidiary or related entities) gives the same or equal protection; and explain retention and deletion and how a user can withdraw consent or request deletion.
• (ii) Permission: an app that collects user or usage data has to obtain consent, even for data seen as anonymous. Paid functionality must not depend on the user agreeing to this collection. Withdrawing consent has to be easy and understandable, and purpose strings must describe the use of the data clearly and completely. An app that relies on GDPR legitimate interest, or a similar law, to collect without consent must meet all of that law's terms.
• (iii) Data Minimization: an app asks only for data relevant to its core functionality and gathers and uses only what the task needs. Where possible, it uses the out-of-process picker or a system sheet for sharing instead of requesting full access to protected resources such as Photos or Contacts.
• (iv) Access: apps must respect permission settings and not manipulate, trick or pressure people into agreeing to unnecessary data access. For example, a photo-posting app must not also insist on microphone access before an upload. Where possible, alternatives are to be offered to users who decline, such as typing an address by hand if location is refused.
• (v) Account Sign-In: an app without significant account-based features should work without a login. An app that supports account creation must also offer deletion of the account within the app. Apps may not demand personal information to function, apart from what is directly relevant to core functionality or required by law. If the core functionality is not tied to a particular social network, access must be possible without logging in or by another mechanism. Pulling basic profile information, posting to the network and inviting friends do not count as core functionality. The app must include a way to revoke social network credentials and cut data access between the app and the network from inside the app. An app may not keep social network credentials anywhere but on the device, and may only use them to connect directly from the app to the network while the app is in use.
• (vi) Developers who use their apps to uncover passwords or other private data by stealth will be removed from the Apple Developer Program.
• (vii) SafariViewController has to be used to show information in plain view. It may not be hidden or covered by other views or layers, and an app may not use it to track users without their knowledge and consent.
• (viii) Apps that put together personal information from any source other than the user directly, or without the user's explicit consent, are not permitted on the App Store or in alternative distribution, even where the source is a public database.
• (ix) Apps providing services in heavily regulated areas (crypto exchanges, air travel, legal cannabis, gambling, healthcare, banking and other financial services), or that need sensitive user information, should come from the legal entity that provides the services, not from an individual. Apps that facilitate legal cannabis sales must be geo-restricted to the matching legal jurisdiction.
• (x) Apps may ask for basic contact details, such as a name and email address, if answering is optional for the user, no features or services depend on providing them, and the request meets all other provisions of the guidelines, including the limits on collecting information from kids.

Related guidelines

• Guideline 5.1: Privacy

Apple's text

This page is an unofficial explanation in our own words. Unofficial explanation, not affiliated with Apple. Apple's text prevails. Apple's wording is on its page, linked below.

• Apple's App Review Guidelines, guideline 5.1.1

Want the guidelines grouped by app type?

If we publish the guidelines grouped by what you are building (subscriptions, kids apps, sign-in), we write to you once. We use the email for nothing else.