GeekyAnts/external_app_launcher

Add iOS privacy manifests

Opened this issue · 3 comments

jttuboi commented

Issue

By Apple's Privacy manifest guidelines,
some action will be required such as adding an empty privacy manifests file even if you are not collecting anything.
Maybe it is good adding an empty privacy manifests file even if you are not collecting anything.

Apple's document: https://developer.apple.com/documentation/bundleresources/privacy_manifest_files
See flutter/flutter#131940 for more context.

Solution suggestion

Add privacy manifests file (PrivacyInfo.xcprivacy) according to libraries privacy usage.

The following is an example of an empty privacy manifests file if this library is not collecting anything.
device_info_plus/ios/PrivacyInfo.xcprivacy

stuartmorgan commented

By Apple's Privacy manifest guidelines,
some action will be required such as adding an empty privacy manifests file even if you are not collecting anything.

This is not currently accurate as a general statement; see https://developer.apple.com/support/third-party-SDK-requirements/.

There is currently no indication from Apple that an SDK that does not use required reason APIs and is not on that list is required to provide a manifest.

  • 👍1
idrisAd commented

By Apple's Privacy manifest guidelines,
some action will be required such as adding an empty privacy manifests file even if you are not collecting anything.

This is not currently accurate as a general statement; see https://developer.apple.com/support/third-party-SDK-requirements/.

There is currently no indication from Apple that an SDK that does not use required reason APIs and is not on that list is required to provide a manifest.

Hi, the current solution is to wait for a potential submission of an app containing this plugin and see what Apple returns?

stuartmorgan commented

Hi, the current solution is to wait for a potential submission of an app containing this plugin and see what Apple returns?

There is very little native iOS code in this plugin. As with any third-party dependency, clients who are concerned about compliance with the privacy manifest requirements can audit the code for data collection or required reason API usage.