Third-party SDK versions meet privacy manifest compliance thresholds

Apple began requiring privacy manifests in third-party SDKs in May 2024. Pods at versions below their compliance threshold ship without a PrivacyInfo.xcprivacy, which means your app's aggregate privacy manifest will be incomplete — Apple flags this during binary validation. This is a supply-chain compliance failure: you inherit the compliance gap from the dependency (CWE-1357, SSDF PW.4), and GDPR Art.28 requires you to ensure your data processors are themselves compliant. An outdated pod version is an audit trail showing you did not exercise due diligence.

Update each non-compliant SDK to its minimum compliant version. For React Native:

npm install react-native-google-mobile-ads@latest
cd ios && pod update Google-Mobile-Ads-SDK

For Flutter:

flutter pub upgrade

After upgrading, re-run find ios/ -name PrivacyInfo.xcprivacy to confirm the updated pods include their manifests. Check each SDK's changelog for breaking API changes before upgrading. Reference minimum compliant versions: Google Mobile Ads iOS ≥11.0.0, Firebase iOS ≥10.18.0, Meta Audience Network ≥6.12.0, Adjust ≥4.35.0, AppsFlyer ≥6.10.0.