Apple announced requirements to provide privacy manifests for third party SDKs on WWDC23.

Starting in spring 2024, if your new app or app update submission adds a third-party SDK that is commonly used in apps on the App Store, you’ll need to include the privacy manifest for the SDK. Signatures are also required when the SDK is used as a binary dependency. This functionality is a step forward for all apps, and we encourage all SDKs to adopt it to better support the apps that depend on them.

Apple Developer

Additionally, developers will have to provide clarifications for some API usage. APIs that could be used for device fingerprinting will require clarifications for App Store review.

Starting in spring 2024, in order to upload your new app or app update to App Store Connect, you’ll be required to include an approved reason in the app’s privacy manifest which accurately reflects how your app uses the API.

Apple Developer

Apple Developer: Privacy updates for App Store submissions

Recommendations

Developer:

Get ready to provide information on privacy required for App Store review.

QA engineer:

Business as usual.

PM/DM:

Plan work to gather required information. Consider updating or changing third-party SDKs with unnecessary privacy implications.

Leave a comment

Leave a Reply