Blocks submissionApp Store

Every bundled framework on Apple's SDK list carries a privacy manifest

What is checked This rule is decided by code from the built app and the listing: ios.built.info, ios.built.privacy_manifests.

Applies to every app

Checked from built, not yet uploaded, on a test track, submitted and in review, published

The rule, in our words

• Third-party SDK requirements: SDKs on Apple's published list must ship a privacy manifest and, when used as a binary, a signature; this applies when submitting a new app or an update that adds a listed SDK.

Okkok never stores the stores' text. Each item above is our paraphrase, and the link is the page it rests on, verified unchanged by fingerprint on every run.

The other store

• Apple requires listed SDKs to ship a privacy manifest and a binary signature; Google requires no signature but imposes a 2-week evidence deadline, encryption, no self-update, no undisclosed background location and no review evasion by SDKs. partial

Check your app

pip install git+https://github.com/petresandu-cloud/okkok
okkok audit path/to/app

The report names this rule as apple.listed-sdk-frameworks-carry-manifests and says what to do, who does it, where, and how it knows.