iOS 审核被拒记录

持续更新中...

1.打开了未使用的功能

Guideline 2.1 - Information Needed
1.We have started the review of your app, but we are not able to continue because we need access to a video that demonstrates the current version of your app using the background audio and location features on a physical iOS device.

Please ensure the video you provide shows a physical iOS device (not a simulator).
解决：项目工程-> targets ->对应工程->Sinning&Capabilities->backgrond modes
根据内容提示删除对应能力，我这里是audio 和 location

1111.png

2.未提供测试账号

有些app需要登录后才能展示所有功能，此时需要提供一个测试账号供apple审核测试
Guideline 2.1 - Information Needed
We were unable to sign in to review your app with the demo account information you provided.

In order for us to continue the review, you will still need to provide a functional demo account that gives us access to all parts of your app so that we may fully review its content, features, and functionality. If your app is restricted to a specific location, you will still need to provide a whitelisted demo account that gives us access to your app. Note that providing a demo video showing your app in use is not enough for us to continue the review.
解决：
1.登录 App Store Connect
2.点击我的app
3.选择对应版本
4.将屏幕滑到 “App Review Information”
5.将“Sign-in required” 勾上
6.填写用于测试的账号密码

3.用户未安装微信时，显示微信登录图标

Guideline 4.2.3 - Design - Minimum Functionality
We were required to install the WeChat app before we could log in via WeChat. Users should be able to log in with WeChat and access their accounts without having to install any additional apps.
解决:使用微信SDK检测设备是否安装了微信app，如果那就隐藏微信登录图标

if ([WXApi isWXAppInstalled]){
     //安装了微信的处理
     _wechatLoginBtn.hidden = No;
} else {
      //没有安装微信的处理
      _wechatLoginBtn.hidden = Yes;
}

4.app不能被正常加载

在审核时，有些页面无法被加载，且没有友好提示或者某些功能无法使用

1. 1 Performance: App Completeness

Guideline 2.1 - Performance - App Completeness
We discovered one or more bugs in your app when reviewed on iPad running iOS 13.2 on Wi-Fi.
Specifically, the app was unable to load properly.
解决:一般情况下，App都是经过测试后才会上架，但是有些情况会无法正常加载：例如

app使用了定位功能：数据根定位返回数据，apple审核不是在大陆境内审核的，此时app需要对境外定位进行特殊处理
app使用了防火墙：有些app只提供境内访问，境外访问会被墙，apple审核不是在大陆境内审核的，需要在和服务器人员沟通，审核时关掉防火墙
特殊功能只在某些时段开放：例如app某些资质认证功能是接入第三方的，然而只在8:00-18:00开放，其他时间不开放，中国大陆的app审核一般apple都是在晚上审核的(应该在美国吧)，所以这些功能就不能用，所以你需要隐藏某些特殊功能，或者调整时间段
您如果遇到其他的，可以在评论中补充

5.接入系统级功能但未使用

Guideline 2.5.1 - Performance - Software Requirements

We noticed that your app uses HealthKit, but your app does not appear to include any primary features that require health or fitness data.

The intended use of HealthKit is generally to share health or fitness data with other apps or devices as a part of the app's core functionality.

Next Steps

To resolve this issue, please remove any HealthKit functionality from your app, as well as any references to this app’s interactivity with HealthKit from the app or its metadata. This includes removing any HealthKit-related keys in your app's Info.plist as well as removing any calls to HealthKit APIs, including those from 3rd party platforms, from your app.

Please see attached screenshots for details.

解决:查找对应的功能，删除对应的能力、代码等；我这里是HealthKit

关闭你项目中的capabilities里面的HealthKit
代码检查下是否使用HealthKit框架
去apple developer账号里面检查app id,关闭HealthKit
删除相关证书和配置文件，重新制作。
如果你的项目中没有使用HealthKit,这些权限提醒就不要加
健康分享权限：Privacy - Health Share Usage Description
健康更新权限：Privacy - Health Update Usage Description
运动使用权限：Privacy - Motion Usage Description

6.后台持续定位

Guideline 2.5.4 - Performance - Software Requirements

Your app declares support for location in the UIBackgroundModes key in your Info.plist file but does not have any features that require persistent location. Apps that declare support for location in the UIBackgroundModes key in your Info.plist file must have features that require persistent location.

Next Steps

To resolve this issue, please revise your app to include features that require the persistent use of real-time location updates while the app is in the background.

If your app does not require persistent real-time location updates, please remove the "location" setting from the UIBackgroundModes key. You may wish to use the significant-change location service or the region monitoring location service if persistent real-time location updates are not required for your app features.

Resources

For more information, please review the Starting the Significant-Change Location Service and Monitoring Geographical Regions.

上面的字面意思是：程序添加了持续定位功能，但是苹果审核时并没有发现哪里有用到？这个提示其实有好多情况：

情况1：
项目确实没有用到持续定位功能。
解决方案：Capabilities - Background Modes - Location updates 关闭这个选项
情况2：项目确实有用到持续定位功能。但是入口深，苹果在审核时一时没有体验到持续定位功能。
解决方法：如何你持续定位功能入口深，审核人员发现不了，那就拍个视频演示下，然后进行申诉；
情况3：使用了第三方的地图定位组件比如：高德/百度。你会发现这些组件要求Location选项是勾选的，但是审核被拒。取消勾选Location选项，程序又会崩溃，不能使用组件；
原因：项目中使用的地图定位组件(高德/百度)在使用单次定位时需要开启项目的Capabilities - Background Modes - Location updates后台定位模式。
解决方法：

Capabilities - Background Modes - Location updates 关闭这个选项
2.添加下面的分类到程序中

#import "CLLocationManager+BackgroundLocationUpdate.h"
#import <objc/runtime.h>


@implementation CLLocationManager (BackgroundLocationUpdate)
+ (void)load {
    if ([UIDevice currentDevice].systemVersion.floatValue >= 9.0) {
        method_exchangeImplementations(class_getInstanceMethod(self.class, NSSelectorFromString(@"setAllowsBackgroundLocationUpdates:")), class_getInstanceMethod(self.class, @selector(rf_swizzledSetAllowsBackgroundLocationUpdates:)));
    }
}

- (void)rf_swizzledSetAllowsBackgroundLocationUpdates:(BOOL)allow {
    if (allow) {
        NSArray *backgroundModes = [[NSBundle mainBundle].infoDictionary objectForKey:@"UIBackgroundModes"];
        if( backgroundModes && [backgroundModes containsObject:@"location"]) {
            [self rf_swizzledSetAllowsBackgroundLocationUpdates:allow];
        } else {
            NSLog(@"APP想设置后台定位，但APP的info.plist里并没有申请后台定位");
        }
    } else {
        [self rf_swizzledSetAllowsBackgroundLocationUpdates:allow];
    }
}
@end

7.包含支付相关的代码

Guideline 2.3.1 - Performance

We discovered that your app contains hidden features. Attempting to hide features, functionality or content in your app is considered egregious behavior and can lead to removal from the Apple Developer Program.

Specifically, we found that your app includes AliPay (支付寶) and Taobao H5 Payments, which provides access to external payment mechanisms and enables the purchase of content, services, or functionality by means other than the in-app purchase API.

If you feel that we have misunderstood how your app functions and that your app is compliant with the App Store Review Guidelines, please reply to this message in Resolution Center to explain how this feature works.

The next submission of this app may require a longer review time, and this app will not be eligible for an expedited review until this issue is resolved.

Next Steps

Review the Performance section of the App Store Review Guidelines.
Ensure your app, as well as any third-party code and SDKs implemented in your app, are compliant with all sections of the App Store Review Guidelines and the Terms & Conditions of the Apple Developer Program.
Revise or remove the hidden features from your app. Once your app is fully compliant, resubmit your app for review.

Submitting apps designed to mislead or harm customers or evade the review process may result in the termination of your Apple Developer Program account. Review the Terms & Conditions of the Apple Developer Program to learn more about our policies regarding termination.

===============================

说明
我的项目里使用到了支付宝 AliPaySDK，集成了支付和授权相关功能。任何支付相关的内容apple都会强调使用内购，使用第三方外界支付无异于在从apple碗里抢肉吃，所以如果不是购买实物类型的支付，那都建议使用内购。
解决方案

由于项目并不是十分依赖支付，所以把支付相关的代码暂时注销了
但是项目依赖支付宝授权(登录、认证)，所以我在回复中添加了说
明：

app已经将支付相关的代码删除，仅保留了AliPaySDK相关的授权功能，不再涉及支付。另外我们并没有在app中找到相关Taobao H5 Payments的功能，如果有烦请详细指出。

终极方案：使用内购

上传的展示图不是iOS设备类型的图

Guideline 2.3.10 - Performance - Accurate Metadata /********* 展示图用的不是iOS设备的截图 OK/

We noticed that your app or its metadata includes irrelevant third-party platform information.

/*特别是app上传的展示图中，其图片的status bar 并不是iOS设备的 */
Specifically, your app includes non-iOS status bar images in the marketing screenshots.

Referencing third-party platforms in your app or its metadata is not permitted on the App Store unless there is specific interactive functionality.

Next Steps

To resolve this issue, please remove all instances of this information from your app and its metadata, including the app description, promotional text, What's New info, previews, and screenshots.

========================================

说明
我上传的展示图不是iOS设备的截屏图

1587086920110_2D0C5EF6-9812-4186-A5D5-441551C4C475.png
解决
换张是iOS设备的截图就可以了

app是个没有意义

Guideline 4.2.2 - Design - Minimum Functionality

We noticed that your app only includes links, images, or content aggregated from the Internet with limited or no native iOS functionality. Although this content may be curated from the web specifically for your users, since it does not sufficiently differ from a mobile web browsing experience, it is not appropriate for the App Store.

Next Steps

We encourage you to review your app concept and work towards creating an app that offers customers an engaging and lasting experience that also meets the App Store’s high expectations for quality and functionality.

Apple Developer includes a variety of design and development resources. Download iOS templates from Apple UI Design Resources, learn more about crafting intuitive, well-designed apps with the Design Video collection, and review the iOS Human Interface Guidelines for best practices to follow when designing apps for the App Store.

=================================

说明
apple说你的app是个仅仅包含图片、链接、还有重网络上扣下来的数据，没有新意。
解决
在回复中体现你的app的价值，我是这么回复的：

本app是一个政务相关功能的app，您所说的链接、图片等都是为了引导用户去使用一个个的政务办事微应用，譬如app内部的身份证办理、在线挂号等微应用能够提高用户/政府的办事效率，并且节省资源。所以并不是一个无意义的app。

涉及新冠肺炎

Guideline 5.1.1 - Legal - Privacy - Data Collection and Storage

We found in our review that your app provides services or requires sensitive user information related to the COVID-19 pandemic. Since the COVID-19 pandemic is a public health crisis, services and information related to it are considered to be part of the healthcare industry. In addition, the seller and company names associated with your app are not from a recognized institution, such as a governmental entity, hospital, insurance company, non-governmental organization, or university.

Per section 5.1.1 (ix) of the App Store Review Guidelines, apps that provide services or collect sensitive user information in highly-regulated fields, such as healthcare, should be submitted by a legal entity that provides these services, and not by an individual developer.

Next Steps

To resolve this issue, your app must be published under a seller and company name of a recognized institution. If you have developed this app on behalf of such an institution, please advise your client to add you to the development team of their Apple Developer account. If your client does not yet have an Apple Developer account, they can enroll for one as an organization through the Apple Developer website.

Resources

For additional details, please refer to the update on the Apple Developer website about Ensuring the Credibility of Health & Safety Information.

===================================

说明
由于新冠肺炎疫情影响持续增大，apple将新冠肺炎疫情消息的发布做了限制，如果你的app内部包含新冠肺炎疫情内容，但app又不是由政府、医院、非盈利性的健康组织等发布的，那么app将被拒绝。我的项目里包含了新冠肺炎的新闻，所以也被拒绝了。
解决

要么开发者账号是由政府、医院、非盈利性的健康组织等创建的，要么就是将由政府、医院、非盈利性的健康组织添加到你的开发者账号下面。个人账号不可以发布包含COVID-19内容的app
删除app中所有涉及COVID-19的内容。如果COVID-19相关的内容是可配置的，那么可以下架，等审核通过后在上架（请测有效！）

获取权限要说明目的

Guideline 5.1.1 - Legal - Privacy - Data Collection and Storage/******权限描述语 ok/

We noticed that your app requests the user’s consent to access their camera and location but does not clarify the use of the camera and location in the applicable purpose string.

Next Steps

Please revise the relevant purpose string in your app’s Info.plist file to specify why the app is requesting access to the user's camera and location. You can modify your app's Info.plist file using the property list editor in Xcode.

To help users understand why your app is requesting access to their personal data, all permission request alerts in your app should specify how your app will use the requested feature.

Resources

For additional information and instructions on requesting permission, please review the Requesting Permission section of the iOS Human Interface Guidelines and the Information Property List Key Reference. You may also want to review the Technical Q&A QA1937: Resolving the Privacy-Sensitive Data App Rejection page for details on how to provide a usage description for permission request alerts.

=====================================

说明
以前在获取定位、相机等使用权限时需要在info.plist文件中添加描述语，这个描述可以很简单：eg：

相机：需要获取拍照功能

但是现在不行了，你需要描述具体使用权限的原因

解决

相机：需要获取拍照功能,用于上传头像

app不能反映是政府开发

Guideline 5.2.1 - Legal - Intellectual Property

The seller and company names associated with your app do not reflect the name governmental organization in the app or its metadata, as required by Guideline 5.2.1 of the App Store Review Guidelines.

Next Steps

Your app must be published under a seller name and company name that reflects the governmental organization name. If you have developed this app on behalf of a client, please advise your client to add you to the development team of their Apple Developer account. If your client does not yet have an Apple Developer account, they can enroll in the Apple Developer Program through the Apple Developer website.

Alternatively, if you are authorized to provide this service in your app, please provide evidence of your relationship with the institutions included in your app.

=========================================

说明
我所负责的app是给政府类型的机构做的，apple觉得的app不像是政府做的
解决

在appstoreconne支援URL填上政府网址
在回复中附加档案传回政府资质证明文件图片

第三方登录为支持apple登录

Guideline 4.8 - Design - Sign in with Apple

We noticed that your app uses a third-party login service but does not offer Sign in with Apple.

Next Steps

To resolve this issue, please revise your app to offer Sign in with Apple as an equivalent login option.

Resources

To learn more, see the Sign in with Apple Overview.

Please see attached screenshots for details.

================================

说明
以后如果你的app支持第三方登录，那就必须也得支持苹果登录
解决
要么都不支持任何第三方登录，要么同时支持苹果登录

苹果登录但是要求绑定手机号

1.1 Legal: Privacy - Data Collection and Storage
Guideline 5.1.1 - Legal - Privacy - Data Collection and Storage

We noticed that your app requires users to register with personal information that is not directly relevant to your app’s core functionality. Specifically, the following fields are required but do not appear to be directly relevant to your app’s core functionality:

Phone number is required after Sign in with Apple

Next Steps

To resolve this issue, please either remove all required fields that are not relevant to the app or make those fields optional. Information requested during registration must be relevant to the features the app provides.

=====================================

第一使用苹果登录，返回后要求绑定关手机号。苹果认为这步多余。
解决：回复为什么要绑定手机号,并附上操作视频。下面是我负责的app所提供的回复。总之你要说明为什么要绑定手机号。

苹果客服，
  您好！XXXAPP上架审核被拒，原因是应用程序要求用户注册与应用程序核心功能不直接相关的个人信息，现进行申诉，具体说明如下，并提供相关视频证明：
   XXX主要为用户提供一站式服务，即用户可以不出门查看或者办理相关服务，便捷、高效、安全。部分应用是和用户个人信息密切相关的，即只有该用户才可以查看。目前主要为用户提供三类服务：
1、匿名用户（不需要用户注册）：可以查看首页Banner区垃圾分类宣传内容，同时也可以查看资讯信息，主要包括国内新闻和本地新闻。若用户要使用一些疫苗接种、市民卡申领等相关服务，需要用户进行注册。因这些服务或事项和用户是密切相关的。
2、注册用户并完成实名认证（需要填写手机号）：可以使用食品许可申办、办事预约等相关服务，因此服务需要获取到用户信息，比如手机号、姓名等，才可以进行预约或者申办处理，处于对用户信息的保密，我们做了脱敏和暗文处理。
3、注册用户并完成实人认证的用户：可以在APP查看我的数据，其中主要包括不动产信息等一些私密数据，为了确保数据安全性，处于对用户数据的保护，需要用户进行扫脸来确认身份，即需要完成高级实名认证。
综上所述：用户使用XXXApp时，部分应用是支持用户匿名使用，即不需要用户进行注册，若用户需要使用一些办事服务或政务类其他应用，从数据安全、服务规范上考虑，需要拿到该用户设备信息，即需要用户进行注册，注册时只需要填写手机号。具体身份信息是否提供，用户是可选择的，具体操作在个人认证页面。
举例说明：
具体操作：首页>个人订阅展台>我的数据>只有实人认证用户才可以访问。
上述业务和用户信息密切相关，需要用户进行高级认证，首先需要用户注册，即提供手机号，用户自主选择是否进行身份认证，提供具体身份信息。
详情使用可查看附件提供的视频，若还有不清楚的，请随时致电137xxxxxxxxx，将为您详细讲解，谢谢！

这条太长了我也不知道怎么描述

Guideline 2.1 - Information Needed

We have started the review of your app, but we are not able to continue because we need additional information about the functionality and services in your app related to the COVID-19 pandemic.

Next Steps

To help us proceed with the review of your app, please provide detailed responses to the following questions. The more information you can provide at this time, the sooner we can complete your review.

What permissions does the app ask for (location, bluetooth, contacts, HealthKit, Clinical Health Records etc.) and what are the permissions strings for each? If necessary, please provide English translations of the permission string.
Are these permissions required or optional?
Are there other uses of these permissions besides those listed in the permission string?
What personal information does the app require? List each separately with reasons why it’s required.
What personal information is optional? List each separately with reasons why the app is requesting it.
Who in your organization has access to the information you collect?
Is any of this data shared with any other parties? If so, provide details.
Beyond the permissions already described, what other disclosures and user consent steps does the app contain?
What jurisdiction(s) (i.e. region, state, country, etc.) is this app intended for?
Has this app been authorized for use by the government of that jurisdiction?
Is this the sole app authorized to provide COVID-19 related services in this jurisdiction?
Is the jurisdiction this app is intended for use in expected to change or expand?
Is the use of any features of this app mandatory in these jurisdictions?
If so, what are the consequences and other options available to individuals in the jurisdiction that cannot or do not install the app?
Will you be applying for and transitioning this app to use the Exposure Notification APIs?
Do you plan to remove any app with quarantine management or contact tracing functionality from the App Store once the need for those apps has passed (i.e. once the COVID-19 pandemic is over)?

If your app is contributing to or conducting research related to the COVID-19 pandemic, please provide detailed answers to these additional questions:

Provide proof of approval from an independent ethics review board.
Provide steps to locate the disclosure and consent mechanisms required under 5.1.3(iii). If done outside of the app before the user receives login credentials, provide the associated consent forms.

Once you reply to this message in Resolution Center with the requested information, we can proceed with your review.

Since your App Store Connect status is Metadata Rejected, we do NOT require a new binary. To revise the metadata, visit App Store Connect to select your app and revise the desired metadata values. Once you’ve completed all changes, reply to this message in Resolution Center and we will continue the review.

====================================
根据内容一个一个回复。注意，下面的回复会超过回复字数限制。我这边的做法是，做成pdf，以附件的形式fa

尊敬的苹果审核人员，您好！ 

 在您对我公司提交审核的app提出疑问后，我公司高度关注并积极的进行了相关问题的整理。

- What permissions does the app ask for (location, bluetooth, contacts, HealthKit, Clinical Health Records etc.) and what are the permissions strings for each? If necessary, please provide English translations of the permission string.

A: 应用要求以下权限：

1\. Privacy - Contacts Usage Description

Chinese：“XXX”想访问您的通讯录，部分微服务需要访问您的通讯录数据。

Enghlish：“XXX” wants to access contacts，cuz some micro services need to access your contacts.

2\. Privacy - Reminders Usage Description

Chinese：“XXX”需要您的同意,才能访问提醒事项。

Enghlish：“XXX” wants to access Reminders，It is used to remind the progress of some affairs

3\. Privacy - Location Always and When In Use Usage Description

Chinese：“XXX”需要您授权定位功能，通过定位功能动态关联到您所在城市

Enghlish：XXX” wants to access function about location, it is Dynamically link to your city through location function

4\. Privacy - Location When In Use Usage Description

Chinese：“XXX”需要您授权定位功能，通过定位功能动态关联到您所在城市

Enghlish：XXX” wants to access function about location, it is Dynamically link to your city through location function

5\. Privacy - Camera Usage Description

Chinese：“XXX”需要您授权相机功能，通过相机功能实现扫描二维码、拍摄图片等功能。

Enghlish：XXX” wants to access Camera，through the camera function to scan two-dimensional code, take pictures and other functions.

6\. Privacy - Location Always Usage Description

Chinese：“XXX”需要您授权定位功能，通过定位功能动态关联到您所在城市

Enghlish：XXX” wants to access function about location, it is Dynamically link to your city through location function

7\. Privacy - Bluetooth Peripheral Usage Description

Chinese：“XXX”需要您授权蓝牙功能，通过蓝牙功能实现人脸扫描等功能。

Enghlish：XXX” wants to access Bluetooth Peripheral，through Bluetooth function to achieve face scanning and other functions.

8\. Privacy - Photo Library Additions Usage Description

Chinese：“XXX”需要您授权相册功能，为您提供图片上传功能。

Enghlish：XXX” wants to access Photo Library Additions，To provide you with image upload function.

9\. Privacy - Microphone Usage Description

Chinese：“XXX”需要您授权麦克风功能，通过麦克风实现语音搜索等功能。

Enghlish：“XXX” wants to access Microphone，voice search is realized by microphone.

10 .Privacy - Location Usage Description

Chinese：“XXX”需要您授权定位功能，通过定位功能动态关联到您所在城市

Enghlish：“XXX” wants to access function about location, it is Dynamically link to your city through location function

11 .Privacy - Calendars Usage Description

Chinese：“XXX”需要您的同意,才能访问日历

Enghlish：“XXX” wants to access Calendars,It is used to remind the progress of some affairs

12 .Privacy - Face ID Usage Description

Chinese：“XXX”需要您授权FaceID功能，实现人脸登录功能。

Enghlish：“XXX” wants to access Face ID, Realize face login function.

- Are these permissions required or optional?

A:都是必需的

- Are there other uses of these permissions besides those listed in the permission string?

A:没有了

- What personal information does the app require? List each separately with reasons why it’s required.

A：

1.手机号：用于账号注册

2.身份证：用于身份认证，而身份认证是为了用户拥有权限去处理某些政务事务

- What personal information is optional? List each separately with reasons why the app is requesting it.

A:上面列的2个个人信息都是必须

- Who in your organization has access to the information you collect?

A:xxxx大数据发展管理xxxx拥有权限，而个人没有权限

- Is any of this data shared with any other parties? If so, provide details.

A：不共享

- Beyond the permissions already described, what other disclosures and user consent steps does the app contain?

A:没有了

- What jurisdiction(s) (i.e. region, state, country, etc.) is this app intended for?

A：中国热河省三里屯市

- Has this app been authorized for use by the government of that jurisdiction?

A: 是的

- Is this the sole app authorized to provide COVID-19 related services in this jurisdiction?

A:不是唯一的

- Is the jurisdiction this app is intended for use in expected to change or expand?

A:暂时没有打算

- Is the use of any features of this app mandatory in these jurisdictions?

A:非强制

- If so, what are the consequences and other options available to individuals in the jurisdiction that cannot or do not install the app?

A: 没有安装的用户，可以使用web网页办理相关事务，或者直接前往相关机构办理。

- Will you be applying for and transitioning this app to use the [Exposure Notification APIs](https://developer.apple.com/documentation/exposurenotification/building_an_app_to_notify_users_of_covid-19_exposure)?

A：暂时不会

- Do you plan to remove any app with quarantine management or contact tracing functionality from the App Store once the need for those apps has passed (i.e. once the COVID-19 pandemic is over)?

A: app不对COVID-19 pandemic进行研究，仅仅做一些跟踪报道。因为app是热河省三里屯市政府授权开发的，其需要报道COVID-19相关内容给用户。在附件中，已附上政府机关资质证明文件。

以上就是我公司针对您提出的疑问作出的解释，如还有其他问题，烦请给出详细错误数据，谢谢！

如果这篇文章对您有用，烦请点个赞，谢谢