We got a report from our security tool that ArcGIS SDK needs to add private reason for those API usage:
- User Defaults
- System Boot Time API
- Disk Space AP
- File Timestamp API
Regarding Apple document, we must address and fix them before Spring 2024, if not our application will be rejected by Apple: https://developer.apple.com/documentation/bundleresources/privacy_manifest_files/describing_use_of_required_reason_api
From Apple words:
Important
From Fall 2023 you’ll receive an email from Apple if you upload an app to App Store Connect that uses required reason API without describing the reason in its privacy manifest file. From Spring 2024, apps that don’t describe their use of required reason API in their privacy manifest file won’t be accepted by App Store Connect.
Your app or third-party SDK must declare one or more approved reasons that accurately reflect your use of each of these APIs and the data derived from their use. You may use these APIs and the data derived from their use for the declared reasons only. These declared reasons must be consistent with your app’s functionality as presented to users, and you may not use the APIs or derived data for tracking.
Did those issues fix or any plan to resolve them?
Thanks!