CyberCertPrepMobile Security FundamentalsApp Distribution (Play Store / App Store)EASYFree question
An iOS app developer receives an App Store rejection under Guideline 5.1.1 (Data Collection and Storage - Privacy Policy). The app collects user email addresses for account creation but the privacy policy URL in App Store Connect returns a 404 error. What is the immediate fix?
- A.Strip the email collection from the signup flow, and the privacy policy requirement falls away with it before resubmission
- B.Ask Apple for a thirty-day extension, and publish the policy page in that window
- C.Add an in-app policy screen, and clear the URL field in App Store Connect
- D.Update the privacy policy URL in App Store Connect to point to a working, accessible privacy policy page and resubmit
Why D is correct
Guideline 5.1.1 requires apps that collect user data to provide a valid, accessible privacy policy URL in App Store Connect. A 404 error means the linked URL is broken. The fix is to host the privacy policy at a working URL and update the link in App Store Connect before resubmitting. Removing email collection entirely is a major product change. An in-app screen alone does not satisfy the App Store Connect URL requirement. Apple does not offer deadline extensions for policy compliance items.
Know someone studying for Mobile Security Fundamentals? Send them this one.