Live data from Hacker News

Apple requires account deletion within apps in AppStore starting January 31

developer.apple.com

51–60 of 515 posts

Re: Apple requires account deletion within apps in AppStore starting January 31

#53
post #45

Earlier quoted context omitted.

Can you just delete the key and local data? Is the requirement to push that deletion to all other SSB instances? Seems like a case where in 2021 this rule is good, but blocks the creation of new business/product/tools that don't confirm with the 2020 way of thinking... which is good for apple.

> Is the requirement to push that deletion to all other SSB instances? Well if you follow the GDPR: yes. Article 17.2 > Where the controller has made the personal data public and is obliged pursuant to paragraph 1 to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are…

If the personal data is encrypted and you destroy the only key that can be used to decrypt it, is it still personal data? Or is it now simply some random bytes?

Re: Apple requires account deletion within apps in AppStore starting January 31

#54

Apple... Now protecting people's privacy much faster than the government... 0-60 real quick. But on the other hand, I think they should also carefully disclose the info they collect at their OS level... Just another case of that old CYA.

It's definitely carefully (not prominently) disclosed, you just gotta go to this privacy page: https://www.apple.com/legal/privacy/en-ww/

Let me get my reading glasses... Ahh... OK, they limit it only to accessing everything... lol.

Re: Apple requires account deletion within apps in AppStore starting January 31

#55

What about inmutable systems? My app (using scuttlebutt) creates an 'account' but it's located as crypto keys only within the app and apple keychain. So far the apple reviewers refused to believe that it works like. It's open source, they've got the code... but still.... Same is true for anything crypto. The account as it were exists on many devices, but it's not something you as the app creator can manage. I think a…

This is why using the blockchain got user data is such a stupid idea. The immutability makes it impossible to redact or remove information, even if that information is encrypted. The same is true foor P2P services where there is no central accounting system. Deleting the account shouldn't be a problem if all the "account" info is stored on the device itself, so if your reviewers aren't completely incompetent I don't…

> even if that information is encrypted.

Assuming that information is only visible to the owner of the key anyways, then disposing of the key effectively renders that encrypted data as garbage. Not being able to delete it only enables some unknown future attack that can decrypt any data without the key.

Re: Apple requires account deletion within apps in AppStore starting January 31

#56

Apple shouldn’t be interfering with other businesses and their users like this. It’s sad to see people here celebrating their inability to run unapproved software.

This is the cost of gaining access to users in iPhone.

This also has nothing to do with unapproved software. The idea that a user can actually delete their data from your servers should not be a controversial topic. But of course it is for businesses and developers, which is why Apple has to make a policy like this.

As a user I am very happy with this.

Re: Apple requires account deletion within apps in AppStore starting January 31

#57
post #4
post #2

Wonder if this can be used to unsubscribe from The NY Times?

I heard you can change your address to California, which then gives the option to cancel online (due to state law). It is absolutely ridiculous that NYT will happily take your card info online, but require you to be on hold to speak with their "customer care" to cancel. Maybe it is time to use virtual CC's a la privacy.com.

Even better, when I had to cancel my NYT subscription, it said there weren't enough cancellation reps to connect me; "try again later".

I went in via the normal support chat, said I wanted to cancel, and was immediately redirected to one. It was an outright lie.

Re: Apple requires account deletion within apps in AppStore starting January 31

#58
"Confirm that any third party with whom an app shares user data (in compliance with these Guidelines)—such as analytics tools, advertising networks and third-party SDKs, as well as any parent, subsidiary or other related entities that will have access to user data—will provide the same or equal protection of user data as stated in the app’s privacy policy and required by these Guidelines."

I call to all smart knowing license people of Hacker News. Is this a copy-left license attached to a person's data?

Re: Apple requires account deletion within apps in AppStore starting January 31

#59
post #2

Wonder if this can be used to unsubscribe from The NY Times?

I was going to say the same thing! They are the WORST. I had to cancel my subscription and the process was like a legal battle with the customer representative. He fought me so hard and it took so long. I lost all respect for the times after that.

I had the same experience with The Economist. And they've been harassing me for months trying to get me to subscribe again.

Re: Apple requires account deletion within apps in AppStore starting January 31

#60
post #9

The problem is that Apple has absolutely no way to enforce the deletion. An app can say "your account is deleted" but not actually delete any data off their servers. What would really give users the control they deserve is the ability to restrict what data can be sent off the device by an app in the first place. Apple should make it possible to deny internet access to an app entirely, and they should provide an API t…

If you want to delete your account, and your primary goal is to prevent future data going to the owner of the app from your device, why not just delete the app?
Post reply on HN