2. 1 Performance: App Completeness
2. 5 Performance: Software Requirements
5. 1.1 Legal: Privacy - Data Collection and Storage
5. 1.2 Legal: Privacy - Data Use and Sharing
---------------------------------------------------------------------
Guideline 2.1 - Information Needed
We have started the review of your app, but we are not able to continue because we need additional information about your app.
Next Steps
To help us proceed with the review of your app, please provide detailed information to the following questions. The more information you can provide upfront, the sooner we can complete your review.
- What are the correlation between information such as national ID, national ID number, educational background, martial status and current address with phone recycling?
- What is the correlation of credit score and selling of mobile device?
- What is the purpose of requesting contact information?
Guideline 2.5.13 - Performance - Software Requirements
We noticed that your app includes facial recognition for account authentication but uses a facial recognition technology other than LocalAuthentication.
Next Steps
To resolve this issue, please revise your app to use LocalAuthentication for any account authentication based on facial recognition.
Resources
Visit Apple Developer for resources on using LocalAuthentication to request authentication from users.
Guideline 5.1.1 - Legal - Privacy - Data Collection and Storage
We noticed that your app requests the user’s consent to access their camera and contact information but does not clarify the use of this feature in the permission modal alert.
Please see attached screenshots for details.
Next Steps
To resolve this issue, please revise the permission modal alert to specify why the app is requesting access to the user's camera and contact information.
Resources
To learn more about requesting the user’s permission to access app features, visit the iOS Human Interface Guidelines. You may also want to review the Technical Q&A QA1937: Resolving the Privacy-Sensitive Data App Rejection page for details on how to provide a usage description for permission request alerts.
Guideline 5.1.2 - Legal - Privacy - Data Use and Sharing
Your app accesses user data from the device but does not have the required precautions in place.
Next Steps
To collect personal data with your app, you must make it clear to the user that their personal data will be uploaded to your server and you must obtain the user's consent before the data is uploaded. You must also have a Privacy Policy URL and ensure that the URL you provide directs users to your privacy policy.
- Starting with iOS 6, there are keys for specifying the reason the app will access the user's protected data. When the access prompt is displayed, the purpose specified in these keys is displayed in that dialog box. If your app will be transmitting protected user data, the usage string in your access request should clearly inform the user that their data will be uploaded to your server if they consent.
Resources
For more information on these keys, please review the Information Property List Key Reference.
解决准则2.1 - 需要的信息
苹果想了解更多的关于app的信息：（因为我们项目中获取了很多用户的隐私信息，身份证，教育背景，住址，通讯录等）
- 国家身份证，国民身份证号码，教育背景，军事身份和当前地址等信息与电话回收之间的相关性如何？
- 信用评分与移动设备销售的相关性是什么？
- 请求联系信息的目的是什么？
这个需要在被拒的申诉里，贴上他们了解的信息，态度要好一点，理由也要充分合理
Dear sir / madam,
hello，
In order to let you know more about our app, more information about our app is below, please check:
／具体获取用户隐私信息的作用／
If you need more informations, please contact us.
Thank you very much.
All the best.
Yours faithfully
**
申诉的时候，苹果那边回复的邮件：
Guideline 2.1 - Information Needed
This type of app has been identified as one that may violate one or more of the following App Store Review Guidelines. Specifically, these types of apps often:
1.1.6 - Include false information, features, or misleading metadata
2.3.0 - Undergo significant concept changes after approval
2.3.1 - Have hidden or undocumented features, including hidden "switches" that redirect to a gambling or lottery website
3.2.1 - Do not come from the financial institution performing the loan services
4.3.0 - Are a duplicate of another app or are conspicuously similar to another app
Before we can continue with our review, please confirm that this app does not violate any of the above guidelines. You may reply to this message in Resolution Center or the App Review Information section in iTunes Connect to verify this app’s compliance.
Given the tendency for apps of this type to violate the aforementioned guidelines, this review will take additional time. If at any time we discover that this app is in violation of these guidelines, the app will be rejected and removed from the App Store, and it may result in the termination of your Apple Developer Program account.
Should you choose to resubmit this app without confirming this app’s compliance, the next submission of this app will still require a longer review time. Additionally, this app will not be eligible for an expedited review until we have received your confirmation.
再次申诉：需要再次确认我们并没有违反他们的规定，申请继续审核
Dear sir / madam,
We have checked our app and make sure that we haven’t violated the rules: 1.1.6 2.3.0 2.3.1 3.2.1 4.3.0.
/当然也可以一起把其它问题一并附上，消除苹果那边对我们的疑惑。/
.If you need other informations or more details, please contact us soon. We will fully cooperates in your demands.
Look forward to your soonest reply.
Thank you very much.
All the best.
Yours faithfully
**
解决准则2.5.13 - 性能 - 软件要求 我们注意到您的应用包含面部识别以进行帐户验证，但使用了LocalAuthentication以外的面部识别技术。
因为我们项目里用到了第三方人脸识别face++，但是苹果条款里：2.5.13 使用人脸识别进行帐户验证的 app 必须使用 LocalAuthentication (而非 ARKit 或其他人脸识别技术)，且必须对未满 13 岁的用户使用备用身份验证方式。
我们解决方案是：把他们提到的人脸识别给隐藏了（其实是后台通过一个字段控制，当审核通过之后，再展示出来）。
解决：准则5.1.1 - 法律 - 隐私 - 数据收集和存储。我们注意到您的应用请求用户同意访问他们的相机和联系信息但未在许可模式警报中说明使用此功能。
这个是说，在获取用户的相机，联系方式等，没有给到用户明确的提示，获取这些信息是做什么用的。
解决准则5.1.2 - 法律 - 隐私 - 数据使用和共享 要使用您的应用收集个人数据，您必须向用户明确其个人数据将上传至您的服务器，并且您必须获得用户的同意才能上传数据。您还必须拥有隐私政策URL，并确保您提供的URL将用户引导至您的隐私政策。
需要在苹果截图有问题的界面：如获取通讯录上传到服务器上增加一个隐私政策url协议，并且在app提交信息里填写上：
被拒了好几次，最后皆大欢喜。
