App Review Guideline

    5.1.1 Data Collection and Storage

    How the app asks for, explains or handles personal data does not meet Apple's privacy rules.

    Why it happens

    • No privacy policy link in App Store Connect and in the app (5.1.1(i)).
    • Permission prompts whose purpose strings don't explain why the data is needed (5.1.1(ii)).
    • Requiring personal data that the core feature doesn't need, such as forcing registration to use non-account features (5.1.1(iii), (v)).
    • Account creation without a way to delete the account in the app (5.1.1(v)).

    How to fix it

    1. Add a privacy policy URL in App Store Connect and a link inside the app.
    2. Rewrite each NS…UsageDescription to say what is collected and why, in plain language.
    3. Let people use features that don't need an account without signing up.
    4. If users can create an account, add in-app account deletion (not just deactivation, not only by email).

    What to reply in Resolution Center

    After the fix is in the build you submit:

    Hello App Review team,
    
    Thank you for the review of [app name] [version]. We addressed Guideline 5.1.1: [privacy policy link added / purpose strings rewritten / account deletion added under Settings › Account › Delete account].
    
    We have submitted build [build number] with these changes. Please let us know if anything else needs attention.
    
    Best regards

    Got this in a rejection?

    Paste the whole message into the rejection desk for the fix and a reply filled in with your app's details.

    Fix my rejection

    In depth

    Other guidelines