Apple’s new App Store rules take effect today: Apps must have a built-in “delete account” function

According to Apple’s previous notice to developers, starting today, apps that support account creation must also allow users to initiate account deletion in the app. Apple has previously extended the deadline for the request, which it announced in May this year was June 30.

Apple said that the relevant requirements that developers need to pay attention to when updating the app are as follows:

  • Users should be able to easily find the account deletion option in the app.
  • If the app offers Sign in with Apple, the developer will need to use the Sign in with Apple REST API to revoke the user token when the account is deleted.
  • The option to temporarily disable or deactivate an account cannot be provided only. Users should be able to delete their personal data along with the account.
  • If the area covered by the app is strictly regulated, the developer may also need to provide additional support processes to confirm and assist with the account deletion process.
  • Comply with applicable legal requirements for storing and retaining user account information and handling account deletions. This includes following local laws in different countries.

Apple’s “App Store Review Guidelines” shows that if the app does not contain important account-based features, please allow users to use it without logging in. If the app supports account creation, the account deletion option must also be provided within the app. Apps must not require users to provide personal information in order to function properly, unless the personal information is directly related to the core functionality of the app, or when required by law.

In addition, Apple pointed out in the review guidelines that if the developer’s core App functionality is not related to a specific social network (such as Facebook, WeChat, Weibo or Twitter, etc.), the developer must provide access without login or other similar mechanisms. Retrieving basic profile information, sharing to social networks, or inviting friends to use the app are not considered core app functions.

The app must also include a mechanism for revoking social network credentials and deactivating data access between the app and the social network from within the app. Apps may not store social network credentials or tokens off-device, and may only use such credentials or tokens to connect directly to social networks from within the app itself during app use.

If you like our news and you want to be the first to get notifications of the latest news, then follow us on Twitter and Facebook page and join our Telegram channel. Also, you can follow us on Google News for regular updates.

Leave a Comment