Apple Sets the Tone for In-App Data Privacy

The iOS app store requires an end-to-end workflow for in-app account deletion for any app that requires a customer to create an account.

Le App Store Review Guideline 5.1.1 (v) has always required applications that collect data through account creation to offer account deletion in the app. But the new Apple account deletion requirement goes further by requiring a simplified end-to-end deletion workflow to complete in-app deletion, including all personal data.

According to the latest news and updates listed on Apple’s developer site, an organization must implement these exact requirements when creating and updating apps:

• The account deletion option should be easy to find in your app.
• If your app offers Sign in with Apple, you’ll need to use the Sign in with Apple REST API to revoke user tokens when deleting an account.
• It’s insufficient to only provide the ability to temporarily disable or deactivate an account. People should be able to delete the account along with their personal data.
• Apps in highly-regulated industries may provide additional customer service flows to confirm and facilitate the account deletion process.
• Follow applicable legal requirements for storing and retaining user account information, and for handling account deletion. This includes complying with local laws in different countries or regions. As always, check with your legal counsel.

The Challenge with Meeting Requirements

If an app requires a customer to create an account, that same customer needs to be able to easily request their data be deleted. Companies need to be able to confirm the account deletion, which includes the deletion of personal data. Once a consumer requests an account to be deleted, the data should no longer exist in any systems in order to comply with Apple requirements.

Non compliance can affect companies in a number of ways, including:

1. Removal: Non-compliance can lead to the removal of iOS apps
2. Lost Revenue: Reduction in financial opportunities to profit from users
3. Loss Users: Decline in users if no longer present on the app store (in-app traffic)
4. Regulatory Fines: The fine for non-compliance can be hefty
5. Brand Trust & Reputation: Brand loyalty is hard to regain once consumers lose trust

For example, a dating app that requires user sign-ups tends to capture an abundance of personal information, especially information considered to be sensitive and personally identifiable data. So, it’s easy to see why Apple would implement these requirements given the liability on their end as a third party. But this is an example of what Apple does right; thinking about users’ privacy and needs will only build trust and increase brand loyalty.

How BigID Can Help Companies Meet Apple’s App Store Requirements

With BigID, organizations can improve their data privacy posture and align with evolving compliance demands. Companies can easily:

• Find their customers data to easily remove accounts
• Create a customized U/X with our privacy portal for customer request intake and completion
• Manage data rights request – from the droit d'accès to deletion
• Fulfill account deletion requests by users with automated deletion workflows
• Communicate with all users the status of their data rights request
• Achieve compliance with Apple’s in-app deletion requirements

Planifier une démonstration de BigID to learn more about how your organization can implement an end-to-end workflow for complete account deletion today.

Auteur

Verrion Wright

Stratégie et développement du contenu

Verrion Wright est un spécialiste du marketing très expérimenté et ambitieux, avec plus de 20 ans d'expérience dans le marketing produit, le développement de contenu et la stratégie numérique. Il a occupé des postes de direction dans divers secteurs, notamment les services informatiques, la confidentialité des données, le marketing et la publicité (planification des médias), en mettant l'accent sur les connaissances fondées sur les données et le marketing intégré. Chez BigID, Verrion est le directeur de la stratégie et du développement de contenu, qui aide à élever le contenu à travers tous les piliers, les régions et les acheteurs, en créant systématiquement un contenu convaincant sur plusieurs supports - y compris la vidéo, les articles, les listes de contrôle, les livres blancs et les guides.