App Review Guideline
5.1.2 Data Use and Sharing
The app shares or uses personal data (for tracking or with third parties) without the permission Apple requires.
Why it happens
- Tracking users across apps and websites without App Tracking Transparency permission (5.1.2(i)).
- Analytics or ad SDKs that read the IDFA or fingerprint the device without ATT.
- Sharing personal data with third-party AI services without disclosure and consent.
How to fix it
- Request ATT permission (AppTrackingTransparency) before any tracking, and stop tracking if the user declines.
- Update the App Privacy answers in App Store Connect to match every SDK that collects data.
- Disclose any sharing of personal data with third parties, including AI providers, and get consent.
What to reply in Resolution Center
After the fix is in the build you submit:
Hello App Review team, Thank you for the review of [app name] [version]. The app now requests App Tracking Transparency permission before any tracking and does not track users who decline. Our App Privacy details were updated to match. We have submitted build [build number] with these changes. Please let us know if anything else needs attention. Best regards
Got this in a rejection?
Paste the whole message into the rejection desk for the fix and a reply filled in with your app's details.
Fix my rejectionIn depth
Other guidelines
- 2.1 App Completeness
- 2.3 Accurate Metadata
- 2.3.1 Hidden or undocumented features
- 2.5.1 Software Requirements: public APIs
- 2.5.2 Self-contained apps
- 3.1.1 In-App Purchase
- 3.1.2 Subscriptions
- 4.0 Design
- 4.2 Minimum Functionality
- 4.3 Spam
- 4.8 Login Services
- 5.1.1 Data Collection and Storage
- 5.1.1(v) Account sign-in and deletion
- 5.2 Intellectual Property