Apple tells developers to give you control of your app data

Apple has told developers to step up and act fast to add account deletion to their apps, if those apps ask users to create accounts within the app. In March, almost three-quarters of its developers weren’t yet prepared for this change.

Your data should remain your own

The idea is solid.

Some app developers make it super-easy to create accounts to make use of their service, but don’t make it at all easy – or sometimes even discoverable – how to delete those accounts.

That gives them access to your data.

Apple doesn’t want people’s data held in ungovernable data stacks. It thinks users should have control of what happens to their information.

The impact of the new rule (already delayed in implementation twice since it was announced in 2020 and detailed here) will be to make it much simpler for users to delete their account.

What is happening

Starting June 30, 2022, all apps that let users create new accounts must also provide users with a way to delete that account if they subsequently choose to do so. The process must also be easy to find. If you use Sign in with Apple to create an account, developers must also revoke any tokens concerned with that user and the process.

It is important to stress that Apple isn’t playing games here. It isn’t enough to simply deactivate the account – it must be completely deleted, along with all data associated with that account.

Additional rules include:

• Apps in highly-regulated industries may provide additional customer service flows to confirm and facilitate the account deletion process.
• Follow applicable legal requirements for storing and retaining user account information, and for handling account deletion. This includes complying with local laws in different countries or regions. As always, check with your legal counsel.
• Apps may not require users to enter personal information to function, except when directly relevant to the core functionality of the app or required by law.
• All apps offering paid online group services must now use Apple’s in-app payment system,

https://youtu.be/Ihw_Al4RNno

I strongly imagine WWDC 2022 will see developers warned that Apple is preparing to become more stringent to act against those apps that do not comply with the letter and the spirit of its privacy requirements.

Please follow me on Twitter, or join me in the AppleHolic’s bar & grill and Apple Discussions groups on MeWe.