Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apple requires account deletion within apps in AppStore starting January 31

developer.apple.com

Post reply on HN
Print view View original

261–270 of 515 posts

Re: Apple requires account deletion within apps in AppStore starting January 31

#261

Post by barsonme »

xg15 wrote: post #216
jimmaswell wrote: post #177

Earlier quoted context omitted.

We invade the privacy of people from a few hundred years ago all the time and it's considered fine. Do you think there will be a breakthrough in encryprion breaking soon enough for it to matter?

Assuming this will take a few hundred years. Browsers have to frequently deprecate cryptosystems that have become insecure. That's not possible with data frozen inside the blockchain. Also, we're at a point where quantom computers are just starting to become practically usable. So yes, I think the point of a "cryptographic breakthrough" that will crack some configurations is quite likely.

If AES is broken in your lifetime, you're going to have _way_ bigger problems than somebody decrypting your blockchain ciphertext.

And if you're not encrypting data with AES (or one of a handful of other algorithms), then you should be worried _now_.

Re: Apple requires account deletion within apps in AppStore starting January 31

#262

Post by jen20 »

wizzwizz4 wrote: post #154
bpodgursky wrote: post #144

Earlier quoted context omitted.

> all apps that allow for account creation must also allow users to initiate deletion of their account from within the app No, that doesn't seem true.

What bank lets you create an account just from the app? … Okay, the digital-only ones, maybe. But virtually all other banks I've used make you go to a branch.

Monzo.

Digital-only, but a "real" bank in every sense of the word.

Re: Apple requires account deletion within apps in AppStore starting January 31

#263

Post by oauea »

floatingatoll wrote: post #243
ManBlanket wrote: post #214

This policy seems purposefully vague. "Explain its data retention/deletion policies and describe how a user can revoke consent and/or request deletion of the user’s data." My first question before looking into it was, "What an auth tenant or some other service that stores user data?" or, "what about like a banking or healthcare app that is just a portal for another system?" And, "What does deleted even mean? IsDelete…

It sounds like you’d like to work at Apple and help them improve their guidelines process. They don’t offer what-if examples, and they note that it’s by design that the guidelines are not detailed to the level you’re asking, so that they have the flexibility to make judgment calls and prevent rules-lawyering problems that crop up with the more detailed approach you seek. 1. Auth tenant. Common sense says that if the…

The sad truth is you're at the whims of some random app store reviewer and it depends completely on their mood of the day. It's honestly insane and impossible to work with. One day everything is fine, the next they have a list of issues that you are forced to spend dozens of developer hours on, just so apple will grace you with the permission to push an unrelated localization fix.

Re: Apple requires account deletion within apps in AppStore starting January 31

#264

Post by nine_k »

anarchogeek wrote: post #27

What about inmutable systems? My app (using scuttlebutt) creates an 'account' but it's located as crypto keys only within the app and apple keychain. So far the apple reviewers refused to believe that it works like. It's open source, they've got the code... but still.... Same is true for anything crypto. The account as it were exists on many devices, but it's not something you as the app creator can manage. I think a…

Nobody is asking you to actually delete the information. I suppose that with a proper design it should be possible to mark an account as inactive, make the associated profile data as inaccessible (if it's accessible via the web, for instance), and, most importantly, stop requiring this account when using the app.

Putting PII or UGC into immutable storage is poor design, unfortunately, both users and laws want this information destroyable.

Re: Apple requires account deletion within apps in AppStore starting January 31

#266

Post by greysphere »

tediousdemise wrote: post #236
greysphere wrote: post #231

Earlier quoted context omitted.

I mean... There are a zillion reasons this isn't trivial. Imagine I have an app that pays you, and it has to report taxes on it. It can't just delete your info. Imagine an app that sells alcohol, maybe it needs to make sure it has confirmation of your age/info in case of legal action. Imagine a chat application, if you chatted with someone and they deleted their account, would you lose the chat information (or even t…

The right to be forgotten is just that - the right to be forgotten. Your issues or needs, whatever they may be (tax info retention, age info retention, etc), take a backseat to the user's rights. In other words: if there is overlap, the right of one person's data to be forgotten supersedes the right of the other person's data to be remembered.

You should try that logic out come tax day, see how that goes.

Re: Apple requires account deletion within apps in AppStore starting January 31

#267

Post by azinman2 »

dfrankow wrote: post #240
tylerrobinson wrote: post #34

Earlier quoted context omitted.

I am not in California, and was able to unsubscribe recently using a simple UI and I did not have to chat with anyone.

Where was the UI? Help us!

https://www.nytimes.com/data-subject-request

Re: Apple requires account deletion within apps in AppStore starting January 31

#268

Post by azinman2 »

xu_ituairo wrote: post #19
yohannparis wrote: post #8

Earlier quoted context omitted.

This is mostly an internet meme, I subscribed and cancelled from the NYT many times without an issue with their online chat.

Isn’t having to have an online chat an unnecessary artificial barrier? Why not a button like most other sites.

They have that too: https://www.nytimes.com/data-subject-request

Re: Apple requires account deletion within apps in AppStore starting January 31

#269

Post by [deleted] »

dathinab wrote: post #249

From the guidelines: > (v) Account Sign-In: If your app doesn’t include significant account-based features, let people use it without a login. If your app supports account creation, you must also offer account deletion within the app. Apps may not require users to enter personal information to function, except when directly relevant to the core functionality of the app or required by law. If your core app functionali…

[deleted]

Re: Apple requires account deletion within apps in AppStore starting January 31

#270

Post by andrekandre »

dathinab wrote: post #249

From the guidelines: > (v) Account Sign-In: If your app doesn’t include significant account-based features, let people use it without a login. If your app supports account creation, you must also offer account deletion within the app. Apps may not require users to enter personal information to function, except when directly relevant to the core functionality of the app or required by law. If your core app functionali…

  > Apps that compile personal information from any source... without the user’s explicit consent
i wonder how far they will enforce this...

for example, will they tolerate apps that refuse to function without said consent?

what about an eula and just tapping "ok i read it"?

just my bias maybe, but "free to use" but requiring "user consent" seems like a nice avenue for getting around restriction and rules designed to protect them

Post reply on HN