App Store Privacy & Data Compliance Audit

app-store-privacy-data · v1.1.0 · paid

Audits iOS and Android apps for privacy manifest completeness, tracking consent, data handling practices, and children's data compliance to prevent store rejections and policy violations.

Privacy Declarations

privacy-declarations · weight 0.3

iOS Privacy Manifest (PrivacyInfo.xcprivacy) present and complete
ab-000464
critical
Google Data Safety form accuracy
ab-000465
high
iOS privacy nutrition labels match actual data collection
ab-000466
high
NS*UsageDescription purpose strings present for all declared permissions
ab-000467
critical
Third-party SDK data collection declared in privacy manifests and store forms
ab-000468
high
Third-party SDK versions meet privacy manifest compliance thresholds
ab-000469
medium
Data Linked/Not Linked to You classifications are correct
ab-000470
low
Background location usage is justified and minimized
ab-000471
medium

Tracking and Advertising

tracking-advertising · weight 0.2

ATT framework requested before any tracking identifier is read
ab-000472
critical
ATT nutrition label and actual tracking scope are consistent
ab-000473
high
No tracking identifiers read before ATT consent is received
ab-000474
high
Privacy-preserving attribution in use or tracking fully disclosed
ab-000475
medium
Ad SDK configuration and Families certification compliance
ab-000476
low

Data Handling

data-handling · weight 0.25

In-app account deletion mechanism is present and accessible
ab-000477
critical
Account and data deletion completed within disclosed timeframe
ab-000478
high
Data collection is minimized to what is necessary
ab-000479
info
Server-side deletion API exists and is accessible from the app
ab-000480
medium
Sensitive data is encrypted at rest using platform-secure storage
ab-000481
high
Data retention periods are disclosed in the privacy policy
ab-000482
low

Children and Sensitive Audiences

children-sensitive · weight 0.2

Age rating and IARC classification match actual content
ab-000483
low
Kids category apps fully comply with COPPA and GDPR-K
ab-000484
high
No behavioral advertising targeting minors
ab-000485
high
Age gate present for restricted content
ab-000486
medium
COPPA-certified ad SDKs used in children's apps
ab-000487
info
Parental controls or consent flow for mixed-audience apps
ab-000488
info

Risk Indicators

risk-indicators · weight 0.05

EU Digital Markets Act payment rules may apply
ab-000489
info