Frequently asked questions

What is PrivacyInfo.xcprivacy?

A property list named exactly PrivacyInfo.xcprivacy that declares tracking, tracking domains, collected data types, and any required reason APIs a bundle accesses. Apple requires it per executable or dynamic library, not just once per app.

Does Hermes require a privacy manifest?

hermes appears on Apple's list of commonly used third-party SDKs that require a privacy manifest and a signature. Since React Native ships Hermes by default, this affects most React Native apps.

When did privacy manifests become mandatory?

Starting May 1, 2024, apps that don't describe their use of required reason API in their privacy manifest aren't accepted by App Store Connect.

Does account deletion by email satisfy guideline 5.1.1(v)?

No. Apple states that offering deletion only through a support phone number or email, or by redirecting the user to sign in on a website, does not meet the requirement.

Which guideline section causes the most rejections?

Performance. Apple's 2025 transparency report attributes 1,354,418 rejections to Performance, compared with 495,673 for Legal and 415,532 for Design.

Can a tool guarantee my app won't be rejected?

No, and be wary of anything that claims otherwise. A static scan finds mechanical problems — missing manifests, absent deletion flows, metadata issues. It cannot predict a reviewer's judgement on a subjective guideline like 4.3.

Is shipcheck available yet?

Not yet. It is in development. The rejection guides on this site are free and useful on their own.