"Paid functionality must not be dependent on or require a user to grant access to this data"
This almost forces all software that does anything on the internet to be subscription based (or free).
Apple requires account deletion within apps in AppStore starting January 31
201–210 of 515 posts
Re: Apple requires account deletion within apps in AppStore starting January 31
#202For the most part a very good thing. Wonder what that means for third-party HN client apps though, since HN accounts cannot be deleted.
Not sure which reply to post this under, so I'll just reply under GP - it took me about 3 minutes to locate a popular HN client which specifically advertises account creation in the overview. https://apps.apple.com/us/app/octal/id1308885491
(Android user, can't test it)
Re: Apple requires account deletion within apps in AppStore starting January 31
#203What about inmutable systems? My app (using scuttlebutt) creates an 'account' but it's located as crypto keys only within the app and apple keychain. So far the apple reviewers refused to believe that it works like. It's open source, they've got the code... but still.... Same is true for anything crypto. The account as it were exists on many devices, but it's not something you as the app creator can manage. I think a…
This is why using the blockchain got user data is such a stupid idea. The immutability makes it impossible to redact or remove information, even if that information is encrypted. The same is true foor P2P services where there is no central accounting system. Deleting the account shouldn't be a problem if all the "account" info is stored on the device itself, so if your reviewers aren't completely incompetent I don't…
In event sourced systems, where the state of an application is stored as a sequence of immutable events, one way of solving the "delete" problem (e.g: GDPR) is to have all the events encrypted to begin with.
The deletion (without performing a rewriting of the events) can be considered executed by simply "deleting" the key used to decrypt the events.
The information is not deleted per se, but it is not usable anymore. Now, if you have access to new means that allow you to break the encryption, then yeah it could be a problem.
Re: Apple requires account deletion within apps in AppStore starting January 31
#204Earlier quoted context omitted.
> all apps that allow for account creation must also allow users to initiate deletion of their account from within the app No, that doesn't seem true.
What bank lets you create an account just from the app? … Okay, the digital-only ones, maybe. But virtually all other banks I've used make you go to a branch.
I think most major brick and mortar banks allow you to open account fully online.
Try going to random bank websites and click on "open account".
Re: Apple requires account deletion within apps in AppStore starting January 31
#205"Paid functionality must not be dependent on or require a user to grant access to this data" This almost forces all software that does anything on the internet to be subscription based (or free).
Couldn’t you have a signed token for ever capability that they’ve purchased? The app could easily check the signature without exposing the private key.
Re: Apple requires account deletion within apps in AppStore starting January 31
#206Earlier quoted context omitted.
I heard you can change your address to California, which then gives the option to cancel online (due to state law). It is absolutely ridiculous that NYT will happily take your card info online, but require you to be on hold to speak with their "customer care" to cancel. Maybe it is time to use virtual CC's a la privacy.com.
Even better, when I had to cancel my NYT subscription, it said there weren't enough cancellation reps to connect me; "try again later". I went in via the normal support chat, said I wanted to cancel, and was immediately redirected to one. It was an outright lie.
Your boy at darkpatterns.org would love that gem. I don't know if you can give it a more succinct name other than, you know, lying.
Re: Apple requires account deletion within apps in AppStore starting January 31
#207Earlier quoted context omitted.
> This is why using the blockchain got user data is such a stupid idea. maybe for you, but there are use cases...
There are use-cases for blockchain.¹ However, storing user data is not one of them. ¹: All of them are silly, or could be done better with something else, but that's not relevant to the point I'm trying to make.
It probably could be fine for public user data that you want to spread out and be somewhat resistant to censor from governments.
> but that's not relevant to the point I'm trying to make.
why do you talk about it if it isn't relevant?
Re: Apple requires account deletion within apps in AppStore starting January 31
#208What about inmutable systems? My app (using scuttlebutt) creates an 'account' but it's located as crypto keys only within the app and apple keychain. So far the apple reviewers refused to believe that it works like. It's open source, they've got the code... but still.... Same is true for anything crypto. The account as it were exists on many devices, but it's not something you as the app creator can manage. I think a…
This is why using the blockchain got user data is such a stupid idea. The immutability makes it impossible to redact or remove information, even if that information is encrypted. The same is true foor P2P services where there is no central accounting system. Deleting the account shouldn't be a problem if all the "account" info is stored on the device itself, so if your reviewers aren't completely incompetent I don't…
Key management is how many comply with GDPR today. They encrypt the PII and associate it with the user. Then, when someone requests their info to be "deleted", they zero out the encryption key.
Re: Apple requires account deletion within apps in AppStore starting January 31
#209Wonder if this can be used to unsubscribe from The NY Times?
I heard you can change your address to California, which then gives the option to cancel online (due to state law). It is absolutely ridiculous that NYT will happily take your card info online, but require you to be on hold to speak with their "customer care" to cancel. Maybe it is time to use virtual CC's a la privacy.com.
If you use PayPal to pay for NYT, you can cancel via PayPal and never speak to anyone.
Re: Apple requires account deletion within apps in AppStore starting January 31
#210What about inmutable systems? My app (using scuttlebutt) creates an 'account' but it's located as crypto keys only within the app and apple keychain. So far the apple reviewers refused to believe that it works like. It's open source, they've got the code... but still.... Same is true for anything crypto. The account as it were exists on many devices, but it's not something you as the app creator can manage. I think a…
Defining account will be interesting. One definition might be: The 'account' consists of the credentials required to add or modify data associated with a human. In that case, the person deleting their private key would suffice for deleting an account. There are plenty of things this doesn't cover, or even backfires. Just interested in what other perspectives people may have. --- Scuttlebutt actually could allow for '…
I’m writing an app that has an account on a server. A user with no account can send a POST form (through the app), requesting that we create an account for them. We do so, through an admin dashboard. It’s easy to completely delete the account through the same dashboard, and I don’t think we have any legal obligations to retain the account.
I’m planning to add a “delete my account” POST form, in the logged-in app.
I assume this will be fine.