Apple reminded developers this week that their apps should include an option to easily delete user accounts, if their apps have a chance for a user to create an account, and noted that the deadline for make the change.
The requirement is to be implemented as of June 30, 2022, as part of the App Store 5.1.1 (v) Review Guideline. Apple says it extended its original deadline for the requirement to give developers more time.
Apple details five requirements for applications that need to be upgraded to meet this requirement:
- The account deletion option should be easy to find in your application.
- If your app offers Sign in with Apple, you’ll need to use the Apple REST API to revoke user tokens when you delete an account.
- It is insufficient to provide only the ability to temporarily deactivate or deactivate an account. People should be able to delete the account along with their personal data.
- Highly regulated industry applications can provide additional customer service flows to confirm and facilitate the account deletion process.
- Follow applicable legal requirements to store and retain user account information and to manage account deletion. This includes compliance with local laws in different countries or regions. As always, check with your attorney.
The App Store 5.1.1 (v) Review Guideline explains:
(v) Sign in to your account: If your app doesn’t include important account-based features, let people use it without signing in. If your application supports account creation, you must also offer in-app account deletion. Applications may not require users to enter personal information in order to function, unless they are directly relevant to the basic functionality of the application or required by law. If the basic functionality of your application is not related to a specific social network (for example, Facebook, WeChat, Weibo, Twitter, etc.), you must provide access without logging in or through another mechanism. Getting basic profile information, sharing on the social network, or inviting friends to use the app is not considered basic functionality of the app. The application must also include a mechanism to revoke social network credentials and disable access to data between the application and the social network from within the application. An app may not store credentials or testimonials on social networks outside of your device, and may only use those credentials or testimonials to connect directly to the social network from the app while the app is in use.
Apple’s original deadline was January 31, 2022, but the company extended the date in an announcement made on January 22, 2022.