App Store guideline 5.4: VPN Apps
VPN apps have to be built on the NEVPNManager API, and only developers enrolled as an organization may offer them. Unofficial explanation, not affiliated with Apple. Apple's text prevails.
- Guideline
- 5.4 VPN Apps
- Section
- 5. Legal
- This page
- Unofficial explanation, not affiliated with Apple. Apple's text prevails.
- Version
- Guidelines last updated October 16, 2026
- Official source
- Apple's App Review Guidelines
What it means
- Before the user does anything to buy or use the service, an app screen has to spell out which user data is collected and what it is used for.
- VPN apps may not sell, use or disclose any data to third parties, for any reason, and must say so in their privacy policy.
- VPN apps must obey local laws. If one is offered in a territory that requires a VPN license, the license information goes in the App Review Notes field.
- Approved providers of security, content blocking and parental control apps, among others, may use the NEVPNManager API as well.
What reviewers look at
The guideline says apps that do not comply will be taken off the App Store and blocked from installing through alternative distribution, and the developer may be removed from the Apple Developer Program.
Apple's text
This page is an unofficial explanation in our own words. Unofficial explanation, not affiliated with Apple. Apple's text prevails. Apple's wording is on its page, linked below.
Want the guidelines grouped by app type?
If we publish the guidelines grouped by what you are building (subscriptions, kids apps, sign-in), we write to you once. We use the email for nothing else.