Live data from Hacker News

Apple requires account deletion within apps in AppStore starting January 31

developer.apple.com

501–510 of 515 posts

Re: Apple requires account deletion within apps in AppStore starting January 31

#501
post #472

Earlier quoted context omitted.

Yes for recurring subscriptions the control should be firmly under the consumers control. Perhaps there should be a special recurring transaction type on credit cards akin to those in PayPal.

Startup idea? I would totally pay for / use a service that managed and paid all of my subscriptions to various things that also made it so that I could cancel any of them at any time with a single click (okay maybe 2 clicks) on their website and hear nothing more about that account.

Privacy.com

Re: Apple requires account deletion within apps in AppStore starting January 31

#502

As much as I like the change, the 3-month window seems unreasonable. I don't currently have AppStore apps, and these kinds of whiplash changes are part of the reason. Microsoft, for all its faults, is much better than Apple or Google here. Businesses take planning and strategy, and these things lead to drop-everything fires. Economies rely on stability.

If you've been based in the EU or offering services to EU customers you should already have the possibility to delete accounts as that's a requirement of the GDPR, so 3 months to expose the existing functionality to the user sounds more than enough.

Re: Apple requires account deletion within apps in AppStore starting January 31

#503

Is this now perhaps the easiest way to remove your Facebook account? Future guides will be like: 1) Buy an Apple device 2) Download and sign in to Facebook app 3) Click delete account button

There's no reason Facebook will delete your account as opposed to soft-deleting it, or maybe will "comply" by literally deleting your username & password but keeping the rest of the data. It's Facebook after all.

Re: Apple requires account deletion within apps in AppStore starting January 31

#504

Earlier quoted context omitted.

When did "deleted" become a vague term? Deleted means removing as much PII as you reasonably have authority to do so. It means purging all that data from all databases with a guarantee that you will be removed completely from all snapshots in a reasonable amount of time. This should be the default, normal understanding of what it means to delete your account. It doesn't mean set a flag in a database so when your comp…

I mean... There are a zillion reasons this isn't trivial. Imagine I have an app that pays you, and it has to report taxes on it. It can't just delete your info. Imagine an app that sells alcohol, maybe it needs to make sure it has confirmation of your age/info in case of legal action. Imagine a chat application, if you chatted with someone and they deleted their account, would you lose the chat information (or even t…

A solution I use for this is to keep 2 sets of data, one operational for the application and one for legal/financial requirements.

When an action such as a payment is taken, or the customer provides certain info that needs to be kept for legal purposes, two records are created. The former can be deleted at will by the user, the latter is completely separate and is kept for as long as needed to comply with laws/regulations.

Re: Apple requires account deletion within apps in AppStore starting January 31

#505

"Confirm that any third party with whom an app shares user data (in compliance with these Guidelines)—such as analytics tools, advertising networks and third-party SDKs, as well as any parent, subsidiary or other related entities that will have access to user data—will provide the same or equal protection of user data as stated in the app’s privacy policy and required by these Guidelines." I call to all smart knowing…

This is basically GDPR. You, as the creator of an app or service is the sole entity responsible for people's data. It's on you to make sure to not spill that data to third-party services.

Which also means that anyone complaining about this change is basically admitting to breaching the GDPR.

Re: Apple requires account deletion within apps in AppStore starting January 31

#507

As much as I like the change, the 3-month window seems unreasonable. I don't currently have AppStore apps, and these kinds of whiplash changes are part of the reason. Microsoft, for all its faults, is much better than Apple or Google here. Businesses take planning and strategy, and these things lead to drop-everything fires. Economies rely on stability.

Apple considers 3 months their standard level of advance notice, with WWDC serving as your warning and the release of iOS in September as the go-live date. However, in this case, they have ended up giving you 6 months and a courtesy reminder. If you aren’t interested in maintaining your app annually, don’t publish apps on Apple’s store. Whether or not their level of notice is enough, they’ve been consistent for years…

> If you aren’t interested in maintaining your app annually, don’t publish apps on Apple’s store.

That's exactly what I do. I avoid the app stores like the plaque.

> (I am not sympathetic to your situation, because as a user of apps, I am exhausted of crappy apps and bottom-of-the-barrel behaviors from developers. I understand that others may feel otherwise, and that’s fine too, just as long as those feelings do not get in the way of being a responsive app developer.)

I think the word here is 'entitled.' There are a few different groups here:

- Bottom-of-the-barrel scammers, whom I have no sympathy to

- Little kids and amateurs, who might want to put something out and move on

- Graduate students and research projects

- Little not-for-profits

- Internal-use small businesses and enterprise apps, where a they might be developed once and forgotten about for decades (yes, plural)

In my case, I don't need to have an app on the app store, and I don't care for Apple's behavior, so I don't have an app there. That hurts Apple (and you, if you're an iPhone user) more than it does me.

You're also confusing strictness with timelines. I'm all for super-strict policies. Just with:

- Backwards compatibility (e.g. grandfathering) of older apps

- Plenty of notice

Re: Apple requires account deletion within apps in AppStore starting January 31

#508
post #492

Earlier quoted context omitted.

The entire request can be logged, displayed to advanced users (so they can report it), inspected by Apple's review teams and automated systems. Any app violating the rules, by uploading user data as GET query parameters (for example) could be detected and banned fairly easily.

> could be detected and banned fairly easily No, it could not. Cryptography can make it as difficult as necessary. (Not even going to touch how unacceptable it would be for Apple to require that it be able to inspect all internet traffic from a person's phone.)

> No, it could not. Cryptography can make it as difficult as necessary.

This is just a failure of imagination. The API could be as restrictive as necessary to ensure privacy.

For example, maybe an app is only authorized to upload specific fields of data and a maximum rate.

How does an app only allowed to upload 10 int32 metrics per day going to secretly upload even a single photo?

> Not even going to touch how unacceptable it would be for Apple to require that it be able to inspect all internet traffic from a person's phone.

There are lots of options for how to implement things so that Apple isn't getting copies of private photos or chat messages. Apple is certainly more trustworthy and accountable than a random app developer from a random foreign country.

Personally, I want a smartphone/app ecosystem that is completely free of any centralization. I'm just talking about how Apple could improve their proprietary/centralized system, which actually does make some of these kinds of things simpler.

Re: Apple requires account deletion within apps in AppStore starting January 31

#509
post #242

Earlier quoted context omitted.

> If Apple will allow third-party app stores or direct installation of applications on devices, dictatorships will lose this capability to harm Apple's customers. As someone who switched from the Samsung note line to iPhone, the only freedom I felt from the ability to install other apps was the freedom to deal with all the unrecoverable crap ware. There’s other phones out there with greater freedom than the iPhone, p…

You are not living in an authoritarian country. That's why you think that the shiny chains that you wear are just a nice decoration, because they were never used to strangle you.

If I live in an authoritarian country then the chains are coming either way

Re: Apple requires account deletion within apps in AppStore starting January 31

#510

From the guidelines: > (v) Account Sign-In: If your app doesn’t include significant account-based features, let people use it without a login. If your app supports account creation, you must also offer account deletion within the app. Apps may not require users to enter personal information to function, except when directly relevant to the core functionality of the app or required by law. If your core app functionali…

So to clarify, apps can't only have social login.. they need to allow sign-in/account-creation via another mechanism, like email confirmation?

Yes, either that or allow access to parts of it(1) without login.

(1): At least to it's core functionality but I think even to more or less all parts not tightly bound to a social login.

Post reply on HN