Blocks submissionApp Store

Device-management features come with Apple's permission, an upfront data declaration and no data sales

The question The app offers device management or configuration profiles. Was the MDM capability granted by Apple? Is the developer an eligible organisation? Is data use declared on a screen before purchase or use? Does the privacy policy commit to no sale or disclosure?

A person or a model answers it from the app's texts and screens; the answer is kept only while the facts it saw are unchanged.

Applies when signal:device-management

Checked from built, not yet uploaded, on a test track, submitted and in review, published

The rule, in our words

• App Review Guidelines: Mobile device management apps need Apple's permission for the capability; may come only from enterprises, schools, governments, or in limited cases parental-control or device-security companies; must show a clear statement of what data is collected and how it is used on an app screen before any purchase or use; may not sell, use, or disclose any data to third parties for any purpose and must promise this in their privacy policy; may use third-party analytics only about the MDM app's own performance, never about the user, device or other apps. The same rules apply to apps that offer configuration profiles. Breach means removal from the App Store, a block on alternative distribution, and possible removal from the Developer Program.

Okkok never stores the stores' text. Each item above is our paraphrase, and the link is the page it rests on, verified unchanged by fingerprint on every run.

The other store

• Google requires a persistent notification, unique icon and manifest flag while running, and forbids tracking any other adult even with consent; Apple restricts who may publish MDM, requires Apple's permission for the capability, and bans any third-party data disclosure. partial

Check your app

pip install git+https://github.com/petresandu-cloud/okkok
okkok audit path/to/app

The report names this rule as apple.5.5.device-management and says what to do, who does it, where, and how it knows.