Ship It Checklist

Checklists /Ship to the App Store /Privacy

High

Match the App Privacy label to the data you collect

App Store Connect asks for an App Privacy label, and guideline 2.3 says metadata, including privacy information, must reflect the app. A label that says you collect nothing, while the app sends email, photos or prompts to a server, is a review problem and a trust problem. Fill the label from the build, not from a template that said 'data not collected'.

How to check

  1. In App Store Connect, open App Privacy and read each data type you ticked.
  2. Compare it with the app: account fields, analytics, crash reports, purchase history, photos, and text sent to a model API.
  3. If you tick nothing, be ready to explain why a network call you can see in the binary is not personal data.
  4. Update the label when you add an SDK. The label does not update itself.

Prompt

Fix prompt
Paste into Cursor or Claude Code
You are working in this iOS project. Do not add features.

Goal: Produce a list of personal data the app collects so I can fill the App Privacy label. Do not change product behaviour.

The project may be Expo, React Native, Swift, a Capacitor wrapper, or a FlutterFlow export. Change only files that already exist.

Steps:
1. Search for analytics, crash reporting, auth fields, photo uploads, and requests to model APIs.
2. Write a table of data type, where it is sent, and whether it is linked to the user. Use only what you can see in the repo.
3. Do not tell me to tick 'data not collected' if you found a network call that sends user content.
4. Do not print certificates, private keys, API keys, or App Store Connect passwords.
5. Tell me which files you changed, and list anything I still have to do in Xcode or App Store Connect.

This uses the same ticks as the checklist page, saved in this browser.