Hacker News new | past | comments | ask | show | jobs | submit login

From the guidelines:

> (v) Account Sign-In: If your app doesn’t include significant account-based features, let people use it without a login. If your app supports account creation, you must also offer account deletion within the app. Apps may not require users to enter personal information to function, except when directly relevant to the core functionality of the app or required by law. If your core app functionality is not related to a specific social network (e.g. Facebook, WeChat, Weibo, Twitter, etc.), you must provide access without a login or via another mechanism. Pulling basic profile information, sharing to the social network, or inviting friends to use the app are not considered core app functionality. The app must also include a mechanism to revoke social network credentials and disable data access between the app and social network from within the app. An app may not store credentials or tokens to social networks off of the device and may only use such credentials or tokens to directly connect to the social network from the app itself while the app is in use.

Also interesting:

> (viii) Apps that compile personal information from any source that is not directly from the user or without the user’s explicit consent, even public databases, are not permitted on the App Store.

So why is Facebook still allowed? It still creates shadow profiles without permissions as far as I know.




>So why is Facebook still allowed? It still creates shadow profiles without permissions as far as I know.

Maybe because the app itself isn't doing it? I'm not sure what "apps that" vs using the information the app gives you are really different but in technical detail it might be.


  > Apps that compile personal information from any source... without the user’s explicit consent
i wonder how far they will enforce this...

for example, will they tolerate apps that refuse to function without said consent?

what about an eula and just tapping "ok i read it"?

just my bias maybe, but "free to use" but requiring "user consent" seems like a nice avenue for getting around restriction and rules designed to protect them


Because apple applies one set of policies to you and me, and another set of policies to the bigcorps. See the leaked messages from the epic lawsuit where apple execs talk about netflix's iap cut.


So to clarify, apps can't only have social login.. they need to allow sign-in/account-creation via another mechanism, like email confirmation?


Yes, either that or allow access to parts of it(1) without login.

(1): At least to it's core functionality but I think even to more or less all parts not tightly bound to a social login.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: