14.3 · Privacy manifests, tracking and ATT, and everyday data hygiene

Privacy is now partly enforced by the platform: what your app declares, what it collects and what it logs is checked at review time and visible to users.

Mental model. Say what you collect, ask before you track, and keep personal data out of places it will leak: logs, screenshots, the pasteboard and analytics.

Declarations and consent

Privacy manifests, required-reason APIs and App Tracking Transparency.

  1. What is a privacy manifest, what are required-reason APIs, and what must third-party SDKs declare? 14.3.1 · L5
    A privacy manifest is a property-list file named PrivacyInfo.xcprivacy that an app, framework or SDK includes to declare its data practices in a…
  2. What is App Tracking Transparency, when must you ask, and what is allowed without permission? 14.3.2 · L3
    Apple defines tracking as linking data collected from your app with data from other companies’ apps, websites or offline sources for advertising or advertising…

Everyday leaks

Logs, screenshots, the pasteboard and the app switcher.

  1. How do you keep personal data out of logs, screenshots, the pasteboard and the app switcher? 14.3.3 · L2
    Most privacy leaks are not hacks but carelessness in ordinary places. Logs: logs end up in sysdiagnose files, crash reports and analytics tools, and developers…

More in Security & privacy