211–220 of 515 posts
"Paid functionality must not be dependent on or require a user to grant access to this data" This almost forces all software that does anything on the internet to be subscription based (or free).
Couldn’t you have a signed token for ever capability that they’ve purchased? The app could easily check the signature without exposing the private key.
Earlier quoted context omitted.
This is why using the blockchain got user data is such a stupid idea. The immutability makes it impossible to redact or remove information, even if that information is encrypted. The same is true foor P2P services where there is no central accounting system. Deleting the account shouldn't be a problem if all the "account" info is stored on the device itself, so if your reviewers aren't completely incompetent I don't…
Hate to break it to you but banks are not deleting your account immediately when you close it. They legally can't.
As much as I like the change, the 3-month window seems unreasonable. I don't currently have AppStore apps, and these kinds of whiplash changes are part of the reason. Microsoft, for all its faults, is much better than Apple or Google here. Businesses take planning and strategy, and these things lead to drop-everything fires. Economies rely on stability.
Details were very vague at the time and now we know when it will actually start being enforced, but overall it’s more like half a year notice.
"Explain its data retention/deletion policies and describe how a user can revoke consent and/or request deletion of the user’s data."
My first question before looking into it was, "What an auth tenant or some other service that stores user data?" or, "what about like a banking or healthcare app that is just a portal for another system?" And, "What does deleted even mean? IsDeleted=1?"
It would appear Apple's stance on those answers is a shrug emoji. I'm no appstore developer but I got a kick out of reading a lot this for the first time. This rule bearing no exception to a trend that for most part seems intended to give Apple the license to eliminate bad actors.
I got a new one for Apple. "Like, do what you gotta do but don't be a jerk."
As much as I like the change, the 3-month window seems unreasonable. I don't currently have AppStore apps, and these kinds of whiplash changes are part of the reason. Microsoft, for all its faults, is much better than Apple or Google here. Businesses take planning and strategy, and these things lead to drop-everything fires. Economies rely on stability.
To be fair, it's closer to 4 months, and it would appear that they won't yank you immediately. It's only for new submissions: > This requirement applies to all app submissions starting January 31, 2022. Unsure if this means new apps, or includes updates to existing apps. But I bet there'll be a bit more of a grace period if you don't have a new update to push.
Earlier quoted context omitted.
For now. If the blockchain survives long enough, that info will become public in time.
We invade the privacy of people from a few hundred years ago all the time and it's considered fine. Do you think there will be a breakthrough in encryprion breaking soon enough for it to matter?
Browsers have to frequently deprecate cryptosystems that have become insecure. That's not possible with data frozen inside the blockchain.
Also, we're at a point where quantom computers are just starting to become practically usable. So yes, I think the point of a "cryptographic breakthrough" that will crack some configurations is quite likely.
Earlier quoted context omitted.
It doesn’t actually say the account must be deleted. It says: “…must also allow users to INITIATE deletion of their account” Capitals mine. So I can allow the initiation of deletion but never actually completely delete the account… and my app complies.
> So I can allow the initiation of deletion but never actually completely delete the account… and my app complies. @TedDoesntTalk If the users that are requesting account deletions see that your app is purposely not complying, I don't imagine your app will be available for long in the app store. Your response is why Apple is implementing this change in the first place. Screw AOL and all of the rest of you making thin…
Sure, if you can open an account easily, then you should be able to delete an account easily. So if we make opening an account difficult, then it is fine that deleting one would also be difficult.
Sounds like an invitation to make opening an account at a bank or a bunch of other services much more difficult aka impossible from the app.
What about inmutable systems? My app (using scuttlebutt) creates an 'account' but it's located as crypto keys only within the app and apple keychain. So far the apple reviewers refused to believe that it works like. It's open source, they've got the code... but still.... Same is true for anything crypto. The account as it were exists on many devices, but it's not something you as the app creator can manage. I think a…
There’s a lot of arguments that people will make about whether this is justified or not, but from a plain rules standpoint, that’s not a permissible data management strategy if you want to publish an iOS app through Apple’s store.
Wonder if this can be used to unsubscribe from The NY Times?
Subscribing through the NY Times iOS app already solves that problem I think, there’s no need to delete your account, just go to the Apple subscriptions management page and end the subscription.