-
Notifications
You must be signed in to change notification settings - Fork 10
Apple's upcoming requirements
Starting April 29th, 2024, Apple requires that all Apps must be built using Xcode 15 and the iOS 17 SDK. iProov recommends that all customers upgrade to Xcode 15 if they haven't already done so, iProov will soon drop support for Xcode 14 in the upcoming releases of the Biometric SDK.
See Apple's official details here.
Every third party SDK is required to include a privacy manifest file if it uses required reasons API, collects data about the person using apps that include the third-party SDK, enables the app to collect data about people using the app, or contacts tracking domains.
All third-party SDKs part of the commonly used SDK list provided by Apple must start including a privacy manifest. Full list of affected SDKs available here.
- Starting March 13th: Apple will notify developers of missing API reasons in their app's manifest.
If you upload a new or updated app to App Store Connect that uses an API requiring approved reasons, we’ll send you an email letting you know if you’re missing reasons in your app’s privacy manifest. This is in addition to the existing notification in App Store Connect.
- Starting May 1st: Approved reasons for APIs are mandatory for app submissions.
You’ll need to include approved reasons for the listed APIs used by your app’s code to upload a new or updated app to App Store Connect. If you’re not using an API for an allowed reason, please find an alternative. And if you add a new third-party SDK that’s on the list of commonly used third-party SDKs, these API, privacy manifest, and signature requirements will apply to that SDK. Make sure to use a version of the SDK that includes its privacy manifest and note that signatures are also required when the SDK is added as a binary dependency.
iProov SDK started providing a privacy manifest and signed framework in v11.0.0 and v10.3.2, aligning with Apple's recommendations. The privacy manifest describes the use of required reason APIs used within the iProov SDK.
The existing iProov privacy manifest covers all SDKs listed in this section, and we are not expecting any issues with new app or app updates submissions.
Submitting an app (or app update) using older iProov SDK versions that do not provide a privacy manifest could lead to unexpected rejection issues during Apple's app review process. To ensure a smooth submission and guarantee compliance with Apple's requirements, we strongly encourage all customers to upgrade to the latest iProov SDK versions before submission 11.0.3 (or later) or version 10.3.3 (or later)."
Those versions also contain new SSL certificates that will increase the longevity of iProov SDK beyond 2024.
Sources: Official details and timelines from Apple available here. Details about privacy manifests available here