Uses official StoreKit (iOS) or Play Billing Library (Android) for digital goods
Why it matters
Apple guideline 3.1.1 and Google Play Billing Policy both require that all digital goods sold within an app — subscriptions, consumables, non-consumables — are transacted exclusively through the platform's official billing API (StoreKit on iOS, Play Billing Library on Android). Routing a digital goods purchase through Stripe, Paddle, PayPal, or any other third-party processor via a webview or external link is not a gray area: it results in immediate rejection and, for repeat violations, developer account termination. Apple has removed apps and banned developer accounts for this specific violation. The business impact is severe: an app rejected during review has zero revenue until resubmitted, a process that takes days to weeks and requires removing the violating payment flow entirely.
Severity rationale
Critical because violation results in immediate App Store rejection and potential permanent developer account termination with no warning period.
Remediation
Remove any Stripe, Paddle, or other third-party payment flows used for digital goods and replace them with StoreKit (iOS) or Play Billing Library (Android). The fastest cross-platform path is RevenueCat, which wraps both platform SDKs and handles receipt validation server-side.
npm install react-native-purchases
npx pod-install
// React Native — purchase via RevenueCat
import Purchases from 'react-native-purchases';
const { customerInfo } = await Purchases.purchasePackage(pkg);
if (customerInfo.entitlements.active['premium']) {
unlockPremium();
}
For Expo projects: npx expo install expo-iap. For Flutter: add in_app_purchase: ^3.2.0 to pubspec.yaml. Physical goods and real-world services (delivery, rides, hotel bookings) are exempt — only digital goods require the platform store.
DetectionPro
The detection method for this pattern is part of AuditBuffet Pro.
The full method (what to look for, pass and fail conditions, and how results get reported) ships inside the App Store IAP & Subscriptions Audit. The pattern definition, severity rationale, and remediation remain openly licensed under CC-BY-4.0.
External references
- external · apple-guideline-3.1.1 — Apple App Store Review Guidelines § 3.1.1 — In-App Purchase
- external · google-play-billing-policy — Google Play Billing Policy — Use of Google Play's Billing System
Taxons
History
- 2026-04-18·v1.0.0·Initial import from app-store-iap-subscriptions·automated