What the store reviewer checks
These checks come from the store's published rules. Open each source before you submit. The scan above checks your website, not your app or extension.
A privacy policy link in two places
Apple asks for the link in the App Store Connect metadata and inside the app, in an easily accessible way.
A login option that limits data
Guideline 4.8 asks for an equivalent login service that limits data collection to name and email and lets users keep their email address private.
Account deletion inside the app
If your app supports account creation, Apple says you must also offer account deletion within the app.
What to account for
What, how and why
The policy must identify what data the app collects, how it collects it, and all uses of that data.
Retention and deletion
Apple asks the policy to describe how a user can revoke consent or request deletion of their data.
Third parties named
The policy must confirm that third parties that receive user data give the same protection the policy promises.
Common mistakes to check
Only Google or Facebook login
An app that offers third-party login without a login option that meets guideline 4.8 can be rejected.
Deletion that only emails support
The deletion route must live inside the app. A policy that names only an email address does not replace it.
Your review checklist
Our suggested review process. The linked requirements above explain the platform or legal basis.
List the account data you keep
Write down name, email, identifiers and anything else tied to the account, where you store it and for how long.
Scan your public site and draft
Scan the site that hosts the policy. Review the suggested vendors, answer the business questions, then add the app data by hand.
Test deletion from a fresh account
Create an account, delete it inside the app, then check the data is gone as the policy says.
Example
Fictional app: Harbor Habits
Assume a habit tracker with email sign-up and Sign in with Apple. The scan sees analytics on the marketing site; the owner confirms what the app stores.
A useful next action
Add the deletion steps to the draft, then link the published page in App Store Connect and in the app settings.
Questions before publishing
Is a policy enough, or also privacy labels?
Apple also asks for app privacy details in App Store Connect. Keep them in line with your policy.
Can the scan see what my app stores?
No. The scan reads your public website only. It cannot see your backend or stored accounts. You confirm those facts yourself.
Is the draft reviewed by a lawyer?
No. A lawyer has not reviewed our templates. The draft is a starting point that you check and adapt against Apple's current rules.
Source review and changes
First edition: platform requirements, implementation checks and fictional worked example. Sources reviewed on the date above; verify changes before relying on them.