App Review Guideline
5.1.1 Data Collection and Storage
How the app asks for, explains or handles personal data does not meet Apple's privacy rules.
Why it happens
- No privacy policy link in App Store Connect and in the app (5.1.1(i)).
- Permission prompts whose purpose strings don't explain why the data is needed (5.1.1(ii)).
- Requiring personal data that the core feature doesn't need, such as forcing registration to use non-account features (5.1.1(iii), (v)).
- Account creation without a way to delete the account in the app (5.1.1(v)).
How to fix it
- Add a privacy policy URL in App Store Connect and a link inside the app.
- Rewrite each NS…UsageDescription to say what is collected and why, in plain language.
- Let people use features that don't need an account without signing up.
- If users can create an account, add in-app account deletion (not just deactivation, not only by email).
What to reply in Resolution Center
After the fix is in the build you submit:
Hello App Review team, Thank you for the review of [app name] [version]. We addressed Guideline 5.1.1: [privacy policy link added / purpose strings rewritten / account deletion added under Settings › Account › Delete account]. We have submitted build [build number] with these changes. Please let us know if anything else needs attention. Best regards
Got this in a rejection?
Paste the whole message into the rejection desk for the fix and a reply filled in with your app's details.
Fix my rejectionIn depth
Other guidelines
- 2.1 App Completeness
- 2.3 Accurate Metadata
- 2.3.1 Hidden or undocumented features
- 2.5.1 Software Requirements: public APIs
- 2.5.2 Self-contained apps
- 3.1.1 In-App Purchase
- 3.1.2 Subscriptions
- 4.0 Design
- 4.2 Minimum Functionality
- 4.3 Spam
- 4.8 Login Services
- 5.1.1(v) Account sign-in and deletion
- 5.1.2 Data Use and Sharing
- 5.2 Intellectual Property