CyberCertPrepMobile Security FundamentalsApp Distribution (Play Store / App Store)EASYFree question
An iOS app developer receives an App Store rejection under Guideline 5.1.1 (Data Collection and Storage - Privacy Policy). The app collects user email addresses for account creation but the privacy policy URL in App Store Connect returns a 404 error. What is the immediate fix?
- A.A. Remove the email collection feature from the app to eliminate the need for a privacy policy
- B.C. Add an in-app privacy policy screen and remove the URL field in App Store Connect
- C.B. Update the privacy policy URL in App Store Connect to point to a working, accessible privacy policy page and resubmit
- D.D. Request a 30-day extension from Apple to develop a privacy policy
Why C is correct
Guideline 5.1.1 requires apps that collect user data to provide a valid, accessible privacy policy URL in App Store Connect. A 404 error means the linked URL is broken. The fix is to host the privacy policy at a working URL and update the link in App Store Connect before resubmitting. Removing email collection entirely is a major product change. An in-app screen alone does not satisfy the App Store Connect URL requirement. Apple does not offer deadline extensions for policy compliance items.
Know someone studying for Mobile Security Fundamentals? Send them this one.