Important notice Spring 2024 iOS Privacy Manifest update

RC services
1

Description

At WWDC23 in June 2023, Apple announced new policies for App Store submission privacy updates. These updates aim to enhance transparency in user data collection and usage, better protecting user privacy rights.

Key policy points:

  1. Third-party SDK Privacy Manifest and signature: All third-party SDKs integrated into applications must provide a Privacy Manifest detailing the types of data collected and how it’s processed. SDK providers must also sign the manifest to verify its authenticity.
  2. Required reason API: Apple introduced a new mechanism requiring developers to provide a valid reason for using certain APIs that may impact user privacy. These reasons must be clearly described in the app’s Privacy Manifest.

Implementation details

  • Fall 2023: Developers receive emails from Apple reminding them to take action if their apps use required reason APIs without describing the reasons in the Privacy Manifest.
  • Spring 2024: The requirement becomes stricter. Apps failing to describe required reason API usage in the Privacy Manifest file won’t pass App Store Connect review.

These changes highlight Apple’s commitment to privacy protection and present new challenges for developers, requiring greater attention to user privacy in app design and development. Developers must ensure their apps and integrated third-party SDKs comply with the new privacy policies to avoid issues with App Store submissions and updates.

Starting in spring 2024, to upload your new app or app update to App Store Connect, you’ll need to include an approved reason in the app’s Privacy Manifest accurately reflecting how your app uses the API.

APIs related to required reason API include:

  • File timestamp APIs
  • System boot time APIs
  • Disk space APIs
  • Active keyboard APIs
  • User defaults APIs

For the full list, visit Apple’s official documentation:

RC IM SDK usage of required reason API

The following SDKs use required reason API.

RongIMLibCore

image
image690×304 39.3 KB

<dict>
	<key>NSPrivacyCollectedDataTypes</key>
	<array>
	</array>
	<key>NSPrivacyTrackingDomains</key>
	<array/>
	<key>NSPrivacyTracking</key>
	<false/>
	<key>NSPrivacyAccessedAPITypes</key>
	<array>
		<dict>
			<key>NSPrivacyAccessedAPIType</key>
			<string>NSPrivacyAccessedAPICategoryDiskSpace</string>
			<key>NSPrivacyAccessedAPITypeReasons</key>
			<array>
				<string>E174.1</string>
			</array>
		</dict>
		<dict>
			<key>NSPrivacyAccessedAPIType</key>
			<string>NSPrivacyAccessedAPICategoryFileTimestamp</string>
			<key>NSPrivacyAccessedAPITypeReasons</key>
			<array>
				<string>C617.1</string>
			</array>
		</dict>
		<dict>
			<key>NSPrivacyAccessedAPIType</key>
			<string>NSPrivacyAccessedAPICategoryUserDefaults</string>
			<key>NSPrivacyAccessedAPITypeReasons</key>
			<array>
				<string>CA92.1</string>
			</array>
		</dict>
	</array>
</dict>

RongIMKit

image
image690×200 23.9 KB

<dict>
    <key>NSPrivacyCollectedDataTypes</key>
    <array>
    </array>
    <key>NSPrivacyTrackingDomains</key>
    <array/>
    <key>NSPrivacyTracking</key>
    <false/>
	<key>NSPrivacyAccessedAPITypes</key>
	<array>
		<dict>
			<key>NSPrivacyAccessedAPIType</key>
			<string>NSPrivacyAccessedAPICategoryUserDefaults</string>
			<key>NSPrivacyAccessedAPITypeReasons</key>
			<array>
				<string>CA92.1</string>
			</array>
		</dict>
	</array>
</dict>

Global IM UIKit

Global IM UIKit usage details will be announced later.

RC RTC SDK usage of required reason API

RongRTCLib

image
image690×207 20.7 KB

RongCallPlusLib

image
image690×161 15.7 KB

RongCallKit

image
image690×164 15.4 KB

RongCallLib

None

PrivacyInfo import guide

  1. Automatic import: If you’re using SDK versions released on or after March 19, 2024, PrivacyInfo will be automatically integrated into your app. No additional action is needed as the new SDK versions include the required Privacy Manifest file.
  2. Manual addition: If you’re using SDK versions released before March 19, 2024, manually add the Privacy Terms to your app by referencing the privacy content listed above. If your app already includes the relevant Privacy Terms, no need to add them again.
  3. Upgrade SDK: If your app uses SDK versions 5.6.9 or 5.6.10, upgrade to versions 5.6.11 or later released on or after March 19, 2024. This ensures compliance with Apple’s latest privacy policies. If you encounter a PrivacyInfo file during the upgrade, delete it and manually add the Privacy Terms as per step 2.

These steps ensure your app meets Apple’s Privacy Manifest requirements when submitting to App Store Connect. A correct Privacy Manifest boosts user trust and is a crucial step in complying with Apple’s policies. If you encounter issues, refer to RC’s official documentation or contact Technical Support for assistance.

More support

For questions, feel free to submit a ticket.