CyberCertPrepMobile Security FundamentalsApp Sandboxing & PermissionsEASYFree question
A developer submits an iOS app to the App Store. App Review rejects it stating the NSLocationWhenInUseUsageDescription string is 'vague and does not clearly explain why the app needs location access.' What is the correct remediation?
- A.A. Remove location functionality from the app to avoid the requirement entirely
- B.D. Request a special entitlement from Apple that waives the purpose string requirement
- C.C. Translate the purpose string into multiple languages and resubmit with localization
- D.B. Update the purpose string to specifically describe the user benefit and feature requiring location access (e.g., 'Your location is used to show restaurants near you'), then resubmit
Why D is correct
Apple App Review enforces that NSXxxUsageDescription strings must be specific and meaningful to users, not generic phrases like 'to improve your experience.' The string must explain exactly which feature uses the data and why it benefits the user. Reviewers reject vague strings under App Store Review Guidelines 5.1.1. Removing the feature is an option but not the requested remediation. Localization alone does not fix a vague string. Apple does not offer entitlement waivers for this requirement.
Know someone studying for Mobile Security Fundamentals? Send them this one.